Privilege escalation

2023-04-0416:15:00

PRIOn knowledge base

www.prio-n.com

acuant acufill sdk

vulnerability

privilege escalation

certutil.exe

elevated privileges

system command prompt

arbitrary code execution

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).

CPENameOperatorVersion
acuant_acufill_sdklt10.22.02.03

CPE	Name	Operator	Version
	acuant_acufill_sdk	lt	10.22.02.03

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48222.pdf