CVE-2023-22283CWE-427

BIG-IP Edge Client for Windows vulnerability

Medium · published February 1, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-02-01T17:52Z
EPSS history
Timeline
  • 01 FEB 17:52Z
    BIG-IP Edge Client for Windows vulnerability
    cvelistv5