PT-2023-6857 · Elecom · Elecom Camera Assistant

Tomohisa Hasegawa · Publicado 2023-02-14 · Atualizado 2025-03-19 · CVE-2023-22368

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ELECOM Camera Assistant version 1.00 QuickFileDealer versions 1.2.1 and earlier

Description The issue is related to an untrusted search path vulnerability. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Recommendations For ELECOM Camera Assistant version 1.00, update to a version that fixes the untrusted search path vulnerability. For QuickFileDealer versions 1.2.1 and earlier, update to a version that fixes the untrusted search path vulnerability. As a temporary workaround, consider restricting access to directories where a Trojan horse DLL could be placed to minimize the risk of exploitation.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

BDU:2023-07869

CVE-2023-22368

Produtos afetados

Elecom Camera Assistant

Referências · 8

• https://bdu.fstec.ru/vul/2023-07869 · Nota de Segurança
• https://vuldb.com/ru/?id.221067 · Nota
• https://t.me/cvenotify/115382 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22368 · Aviso do Fabricante
• https://elecom.co.jp/news/security/20230214-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-22368 · Nota de Segurança
• https://jvn.jp/en/jp/JVN60263237 · Nota
• https://t.me/cibsecurity/58205 · Publicação no Telegram