Privilege escalation

2023-04-0416:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

acuant acufill sdk

arbitrary code execution

elevation of privileges

security vulnerability

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges).

CPENameOperatorVersion
acuant_acufill_sdklt10.22.02.03

CPE	Name	Operator	Version
	acuant_acufill_sdk	lt	10.22.02.03

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48224.pdf