Design/Logic Flaw

2024-02-2616:27:00

PRIOn knowledge base

www.prio-n.com

dll hijacking

qognify

vms client viewer

arbitrary code execution

privilege escalation

nvd

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

References

seclists.org/fulldisclosure/2024/Mar/10

r.sec-consult.com/qognify