Lucene search

K
cveMitreCVE-2022-45988
HistoryMar 03, 2023 - 3:15 p.m.

CVE-2022-45988

2023-03-0315:15:10
CWE-269
mitre
web.nvd.nist.gov
15
cve-2022-45988
starsoftcomm
coocare 5.304
privilege escalation
file upload
nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

5.1%

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload.

Affected configurations

Nvd
Node
starsoftcommcoocareRange<5.364
VendorProductVersionCPE
starsoftcommcoocare*cpe:2.3:a:starsoftcomm:coocare:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2022-45988