PT-2022-25146 · Panini · Panini Everest Engine

Usmarine2141 · Published 2022-10-07 · Updated 2022-10-11 · CVE-2022-39959

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panini Everest Engine version 2.0.4

Description The issue allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%Panini folder, leading to privilege escalation. A service running as SYSTEM uses the unquoted path of %PROGRAMDATA%PaniniEverest EngineEverestEngine.exe, which may result in the execution of a Trojan horse %PROGRAMDATA%PaniniEverest.exe instead of the intended vendor-supplied EverestEngine.exe file.

Recommendations For Panini Everest Engine version 2.0.4, consider renaming or removing the potentially malicious Everest.exe file from the %PROGRAMDATA%Panini folder to prevent privilege escalation. As a temporary workaround, restrict access to the %PROGRAMDATA%Panini folder to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-39959

Affected Products

Panini Everest Engine

References · 5

• 🔥 https://github.com/usmarine2141/CVE-2022-39959 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-39959 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39959 · Vendor Advisory
• https://panini.com/en/news-events/panini-patents-revolutionary-new-%E2%80%9Ceverest%E2%80%9D-architecture · Vendor Advisory
• https://t.me/cibsecurity/51047 · Telegram Post