CVE-2022-25943

Опубликовано: 09 мар. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed.

Ссылки

https://github.com/HadiMed/KINGSOFT-WPS-Office-LPE
Exploit
Third Party Advisory
https://jvn.jp/en/vu/JVNVU90673830/
Third Party Advisory
https://www.wps.com/whatsnew/pc/20210806/
Product
https://github.com/HadiMed/KINGSOFT-WPS-Office-LPE
Exploit
Third Party Advisory
https://jvn.jp/en/vu/JVNVU90673830/
Third Party Advisory
https://www.wps.com/whatsnew/pc/20210806/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kingsoft:wps_office:*:*:*:*:*:windows:*:*

Версия до 11.2.0.10258 (исключая)

EPSS

Процентиль: 93%

0.09861

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

GHSA-q9cp-6576-r6r7