Lucene search

INCDCVE-2023-32221

HistoryJun 12, 2023 - 9:15 p.m.

CVE-2023-32221

2023-06-1221:15:22

INCD

web.nvd.nist.gov

cve-2023

cve

easeus

todo backup

privilege escalation

local attacker

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation.

Affected configurations

Nvd

Node

easeustodo_backupMatch20220111.390

VendorProductVersionCPE
easeustodo_backup20220111.390cpe:2.3:a:easeus:todo_backup:20220111.390:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
easeus	todo_backup	20220111.390	cpe:2.3:a:easeus:todo_backup:20220111.390:::::::*

CNA Affected

[
  {
    "vendor": "EaseUS",
    "product": "Todo Backup",
    "versions": [
      {
        "version": "version 20220111.390",
        "status": "affected"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-32221