CVE-2023-49114

2024-02-2616:27:47

CWE-427

551230f0-3615-47bd-b7cc-93e92e730bbf

web.nvd.nist.gov

cve-2023-49114

qognify vms

dll hijacking

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

References

seclists.org/fulldisclosure/2024/Mar/10

r.sec-consult.com/qognify