CVE-2022-4258CWE-428

Hima: Unquoted path vulnerabilities in HIMA PC based Software

High · published January 16, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2023-01-16T09:52Z
EPSS history
Timeline
  • 16 JAN 09:52Z
    Hima: Unquoted path vulnerabilities in HIMA PC based Software
    cvelistv5