CVE-2022-28792CWE-427

DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code

Medium · published May 3, 2022

CVSS v3.1
6.2
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-05-03T19:43Z
EPSS history
Timeline
  • 03 MAY 19:43Z
    DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code
    cvelistv5