CVE-2022-23410CWE-427

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking

published February 14, 2022

CVSS
—
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-02-14T21:04Z
EPSS history
Timeline
  • 14 FEB 21:04Z
    AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking
    cvelistv5