Design/Logic Flaw

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

acuant acufill sdk

gemalto document reader

dll hijacking

vulnerability

elevated privileges

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation process is vulnerable to DLL hijacking, because it attempts to execute (with elevated privileges) multiple non-existent DLLs out of a non-existent standard-user writable location.

CPENameOperatorVersion
acuant_acufill_sdklt10.22.02.03

CPE	Name	Operator	Version
	acuant_acufill_sdk	lt	10.22.02.03

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48225.pdf