Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-43722

Опубликовано: 13 дек. 2022
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:siemens:sicam_pas\/pqs:*:*:*:*:*:*:*:*
Версия до 7.0 (исключая)

EPSS

Процентиль: 18%
0.00056
Низкий

7.8 High

CVSS3

Дефекты

CWE-427
CWE-427

Связанные уязвимости

CVSS3: 7.8
github
около 3 лет назад

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.

EPSS

Процентиль: 18%
0.00056
Низкий

7.8 High

CVSS3

Дефекты

CWE-427
CWE-427