Lucene search

MitreCVELIST:CVE-2022-48226

HistoryApr 04, 2023 - 12:00 a.m.

CVE-2022-48226

2023-04-0400:00:00

mitre

www.cve.org

cve-2022-48226

acuant

acufill

sdk

installation

execution

windows

temp

user

path

file

code execution

permissions

manipulation

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code execution. Permissions need to be modified to prevent manipulation.

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48226.pdf