Design/Logic Flaw

2023-12-0106:15:00

PRIOn knowledge base

www.prio-n.com

dll hijacking

vulnerability

huddlycameraservice

version 8.0.7

write privileges

arbitrary code

escalate privileges

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges.

CPENameOperatorVersion
huddlycameraservicelt8.0.7

CPE	Name	Operator	Version
	huddlycameraservice	lt	8.0.7

References

www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/