PT-2023-29471 · Huddly · Huddlycameraservice

Henrik Pedersen · Published 2023-12-01 · Updated 2023-12-19 · CVE-2023-45253

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Huddly HuddlyCameraService versions prior to 8.0.7, excluding version 7.99

Description An issue in HuddlyCameraService allows attackers to manipulate files and escalate privileges via the RollingFileAppender.DeleteFile method performed by the log4net library. Additionally, a DLL Hijacking vulnerability exists due to the service installation in a directory that grants write privileges to standard users, allowing attackers to manipulate files, execute arbitrary code, and escalate privileges.

Recommendations For versions prior to 8.0.7, excluding version 7.99, update to version 8.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the directory where the service is installed to prevent standard users from gaining write privileges. Avoid using the RollingFileAppender.DeleteFile method until the issue is resolved.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-45253

Affected Products

Huddlycameraservice

References · 10

• 🔥 https://xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-45253 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45253 · Vendor Advisory
• https://t.me/cvenotify/62991 · Telegram Post
• https://t.me/cvenotify/61862 · Telegram Post
• https://t.me/cvenotify/62992 · Telegram Post
• https://t.me/cvenotify/61846 · Telegram Post
• https://twitter.com/NUYTSTECH/status/1737342953281269904 · Twitter Post
• https://t.me/cvenotify/61861 · Telegram Post
• https://t.me/cvenotify/61845 · Telegram Post