CVE-2023-28122

2023-04-1900:00:00

hackerone

www.cve.org

windows

vulnerability

ui desktop

local privilege escalation

version 0.59.1.71

version 0.62.3

EPSS

Percentile

5.1%

JSON

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "UI Desktop for Windows",
    "versions": [
      {
        "version": "Fixed on Version 0.62.3 or later.",
        "status": "affected"
      }
    ]
  }
]

References

community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-28122