PT-2022-22009 · Micro Star International · Msi Feature Navigator

Published 2022-09-12 · Updated 2022-09-15 · CVE-2022-34110

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Micro-Star International MSI Feature Navigator version 1.0.1808.0901

Description An issue in the software allows attackers to download arbitrary files, regardless of the file type or size.

Recommendations For version 1.0.1808.0901, consider restricting access to the file download functionality until a patch is available. As a temporary workaround, limit the types and sizes of files that can be downloaded to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-34110

Affected Products

Msi Feature Navigator

References · 8

• 🔥 https://gainsec.com/2022/08/26/cve-2022-34109-cve-2022-34110-cve-2022-34108 · Exploit
• https://osv.dev/vulnerability/CVE-2022-34110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34110 · Security Note
• http://msi.com · Note
• https://t.me/cvenotify/36027 · Telegram Post
• https://t.me/cvenotify/36012 · Telegram Post
• https://t.me/cibsecurity/49581 · Telegram Post
• http://micro-star.com · Note