PT-2023-14140 · Hima · Hima Pc Based

Published 2023-01-16 · Updated 2023-01-24 · CVE-2022-4258

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HIMA PC based Software (affected versions not specified)

Description The issue is related to an unquoted Windows search path vulnerability. This might allow local users to gain privileges via a malicious .exe file, potentially gaining full access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-4258

Affected Products

Hima Pc Based

References · 4

• https://osv.dev/vulnerability/CVE-2022-4258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4258 · Security Note
• https://cert.vde.com/en/advisories/VDE-2022-059 · Note
• https://t.me/cvenotify/42074 · Telegram Post