PT-2022-16455 · Naver · Naver Cloud Explorer Beta

Published 2022-06-13 · Updated 2022-06-21 · CVE-2022-24077

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer Beta (affected versions not specified)

Description The issue allows an attacker to execute arbitrary code with System privilege via malicious DLL injection. This can potentially lead to significant system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Uncontrolled Search Path Element

Weakness Enumeration

CWE-269

CWE-427

Related Identifiers

CVE-2022-24077

Affected Products

Naver Cloud Explorer Beta

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-24077 · Security Note
• https://cve.naver.com/detail/cve-2022-24077.html · Vendor Advisory
• https://t.me/cibsecurity/44307 · Telegram Post