CVE-2022-48222
This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.14% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-427
- Affected
- gbgplc/acuant acufill sdk
- Source
- cve@mitre.org
References
- https://acuant.comNot Applicable
- https://hackandpwn.com/disclosures/CVE-2022-48222.pdfThird Party Advisory
- https://acuant.comNot Applicable
- https://hackandpwn.com/disclosures/CVE-2022-48222.pdfThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.