PT-2023-15939 · Caphyon · Caphyon Advanced Installer

Heechan Kim + 1 · Published 2023-09-30 · Updated 2024-05-17 · CVE-2022-4956

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Caphyon Advanced Installer version 19.7

Description A critical vulnerability has been found in the WinSxS DLL Handler component of Caphyon Advanced Installer. The manipulation leads to an uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public.

Recommendations For Caphyon Advanced Installer version 19.7, upgrade to version 19.7.1 to address this issue. It is recommended to upgrade the affected component. As a temporary workaround, consider restricting access to the WinSxS DLL Handler until the update is applied.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2022-4956

Affected Products

Caphyon Advanced Installer

References · 10

• 🔥 https://heegong.github.io/posts/Advaned-Installer-Local-Privilege-Escalation-Vulnerability · Exploit
• https://advancedinstaller.com/release-19.7.1.html#bugfixes · Patch
• https://osv.dev/vulnerability/CVE-2022-4956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4956 · Security Note
• https://twitter.com/CVEnew/status/1708168119020388798 · Twitter Post
• https://vuldb.com/?ctiid.240903 · Note
• https://vuldb.com/?id.240903 · Note
• https://t.me/cvenotify/58816 · Telegram Post
• https://t.me/cibsecurity/71361 · Telegram Post
• https://twitter.com/DMFezzaReedCISA/status/1708183182900597143 · Twitter Post