CVE-2022-23334

Опубликовано: 30 янв. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.

Ссылки

http://ip-label.com
Vendor Advisory
http://newtest.com
Broken Link
https://www.on-x.com/wp-content/uploads/2023/01/ON-X-Security-Advisory-Ip-label-Ekara-Newtest-CVE-2022-23334.pdf
Broken Link
http://ip-label.com
Vendor Advisory
http://newtest.com
Broken Link
https://www.on-x.com/wp-content/uploads/2023/01/ON-X-Security-Advisory-Ip-label-Ekara-Newtest-CVE-2022-23334.pdf
Broken Link
https://www.on-x.com/wp-content/uploads/2023/01/ON-X-Security-Advisory-Ip-label-Ekara-Newtest-CVE-2022-23334.pdf
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ip-label:newtest:*:*:*:*:*:*:*:*

Версия до 8.5r0 (исключая)

EPSS

Процентиль: 36%

0.00152

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-347

Связанные уязвимости

GHSA-4847-3cw5-45xm