CVE-2022-41796

2022-10-2414:15:52

CWE-427

[email protected]

web.nvd.nist.gov

768

cve-2022-41796

untrusted search path

vulnerability

privileges

content transfer

windows

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

29.9%

JSON

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

Vulners

NVD

Node

sony_corporationcontent_transfer_\(for_windows\)Match1.3

CPENameOperatorVersion
sony:content_transfersony content transferle1.3

CPE	Name	Operator	Version
sony:content_transfer	sony content transfer	le	1.3

CNA Affected

[
  {
    "vendor": "Sony Corporation",
    "product": "Content Transfer (for Windows)",
    "versions": [
      {
        "version": "Ver.1.3 and prior",
        "status": "affected"
      }
    ]
  }
]