Lucene search

K
nvd[email protected]NVD:CVE-2022-45988
HistoryMar 03, 2023 - 3:15 p.m.

CVE-2022-45988

2023-03-0315:15:10
CWE-269
web.nvd.nist.gov
1
cve-2022-45988
privilege escalation
crafted file upload
local attackers
arbitrary commands

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload.

Affected configurations

Nvd
Node
starsoftcommcoocareRange<5.364
VendorProductVersionCPE
starsoftcommcoocare*cpe:2.3:a:starsoftcomm:coocare:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2022-45988