Lucene search
PRIOn knowledge basePRION:CVE-2022-48221HistoryApr 04, 2023 - 3:15 p.m.
Race condition
2023-04-0415:15:00
PRIOn knowledge base
www.prio-n.com
2
issue
acuant acufill sdk
msi
standard user
writable directory
race condition
oplock manipulation
code execution
privilege elevation
An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI’s get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten by a standard user. They then get executed by the elevated installer. This gives a standard user full SYSTEM code execution (elevation of privileges).
| CPE | Name | Operator | Version |
|---|---|---|---|
| acuant_acufill_sdk | lt | 10.22.02.03 |
Related
cve
cve
CVE-2022-48221
2023-04-04 15:15:08
cvelist
cvelist
CVE-2022-48221
2023-04-04 00:00:00
nvd
nvd
CVE-2022-48221
2023-04-04 15:15:08