Lucene search
HistoryOct 24, 2022 - 2:15 p.m.
CVE-2022-41796
untrusted search path
content transfer
installer
privileges
trojan horse dll
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.9%
Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected configurations
Node
sonycontent_transferRange≤1.3windows
Related
prion
prion
Design/Logic Flaw
2022-10-24 14:15:00
jvn
jvn
cvelist
cvelist
CVE-2022-41796
2022-10-24 00:00:00
cve
cve
CVE-2022-41796
2022-10-24 14:15:52
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.9%
Related for NVD:CVE-2022-41796