CVE-2022-23410CWE-427
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking
published February 14, 2022
What it is
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00383 · 31.2th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2022-02-14T21:04Z
EPSS history
Timeline