CVE-2022-24138

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has…

published July 6, 2022

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to wait for CreateProcess and switch the genuine component with a malicious executable thus gaining code execution as a high privilege user (Low Privilege -> high integrity ADMIN).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00584 · 47.2th percentile
Published
2022-07-06T12:41Z
EPSS history
Timeline
  • 06 JUL 12:41Z
    IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has…
    cvelistv5