Design/Logic Flaw

2023-11-2309:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

plug-in

parameters

malicious files

exploit

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.0%

JSON

An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters, which could cause affected computers to download malicious files.

CPENameOperatorVersion
localservicecomponentsle1.0.0.78

CPE	Name	Operator	Version
	localservicecomponents	le	1.0.0.78

References

www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-web-browser-plug-in-locals/