PT-2022-22008 · Micro Star International · Msi Feature Navigator

Published 2022-09-12 · Updated 2022-09-15 · CVE-2022-34109

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro-Star International MSI Feature Navigator version 1.0.1808.0901

Description An issue in the software allows attackers to write arbitrary files to the directory PromoPhoto, regardless of file type or size.

Recommendations For version 1.0.1808.0901, consider restricting access to the PromoPhoto directory to minimize the risk of exploitation. As a temporary workaround, limit the ability to write files to this directory until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-34109

Affected Products

Msi Feature Navigator

References · 7

• 🔥 https://gainsec.com/2022/08/26/cve-2022-34109-cve-2022-34110-cve-2022-34108 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-34109 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34109 · Vendor Advisory
• http://msi.com · Note
• https://t.me/cvenotify/36013 · Telegram Post
• https://t.me/cibsecurity/49579 · Telegram Post
• http://micro-star.com · Note