Lucene search

K
cvelistMitreCVELIST:CVE-2022-48223
HistoryApr 04, 2023 - 12:00 a.m.

CVE-2022-48223

2023-04-0400:00:00
mitre
www.cve.org
cve-2022-48223
dll hijacking
sdk vulnerability
acuant installer
certutil.exe
insecure permissions

0.0004 Low

EPSS

Percentile

9.0%

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuant installer to repair certificates. This call is vulnerable to DLL hijacking due to a race condition and insecure permissions on the executing directory.

0.0004 Low

EPSS

Percentile

9.0%

Related for CVELIST:CVE-2022-48223