PT-2023-29470 · Huddly · Huddlycameraservice

Henrik Pedersen · Published 2023-12-01 · Updated 2023-12-20 · CVE-2023-45252

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99

Description The issue allows attackers to manipulate files, execute arbitrary code, and escalate privileges due to the installation of the service in a directory that grants write privileges to standard users.

Recommendations For versions prior to 8.0.7, excluding version 7.99, update to version 8.0.7 or later to resolve the issue.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-45252

Affected Products

Huddlycameraservice

References · 10

• 🔥 https://xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253 · Exploit
• https://osv.dev/vulnerability/CVE-2023-45252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45252 · Security Note
• https://t.me/cvenotify/62991 · Telegram Post
• https://t.me/cvenotify/61862 · Telegram Post
• https://t.me/cvenotify/62992 · Telegram Post
• https://t.me/cvenotify/61846 · Telegram Post
• https://twitter.com/NUYTSTECH/status/1737704087905554823 · Twitter Post
• https://t.me/cvenotify/61861 · Telegram Post
• https://t.me/cvenotify/61845 · Telegram Post