Path traversal

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

acuant acufill sdk

path traversal

vulnerability

installation

elevated code execution

permissions

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code execution. Permissions need to be modified to prevent manipulation.

CPENameOperatorVersion
acuant_acufill_sdklt10.22.02.03

CPE	Name	Operator	Version
	acuant_acufill_sdk	lt	10.22.02.03

References

acuant.com

hackandpwn.com/disclosures/CVE-2022-48226.pdf