Lucene search

[email protected]NVD:CVE-2023-28122

HistoryApr 19, 2023 - 8:15 p.m.

CVE-2023-28122

2023-04-1920:15:12

[email protected]

web.nvd.nist.gov

local privilege escalation

windows

ui desktop

arbitrary commands

system

vulnerability

fixed

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later.

Affected configurations

Nvd

Node

uidesktopRange<0.62.3.0windows

VendorProductVersionCPE
uidesktop*cpe:2.3:a:ui:desktop:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
ui	desktop	*	cpe:2.3:a:ui:desktop::::::windows::*

References

community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-28122

prion1 cve1 cvelist1