PT-2022-10072 · Exemsi · Exemsi Msi Wrapper

Published 2022-12-13 · Updated 2023-08-08 · CVE-2021-32415

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EXEMSI MSI Wrapper versions prior to 10.0.50

Description The issue introduces a local privilege escalation vulnerability in installers created by the affected software.

Recommendations For versions prior to 10.0.50, update to version 10.0.50 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-32415

Affected Products

Exemsi Msi Wrapper

References · 5

• https://osv.dev/vulnerability/CVE-2021-32415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32415 · Security Note
• https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm · Note
• http://msi.com · Note
• http://exemsi.com · Note