CVE-2022-23764CWE-346

TERUTEN WebCube update remote code execution vulnerability

High · published August 17, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification logic to update both digitally signed and unauthorized files, enabling remote code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.1th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2022-08-17T20:23Z
EPSS history
Timeline
  • 17 AUG 20:23Z
    TERUTEN WebCube update remote code execution vulnerability
    cvelistv5