PT-2022-12365

CVE-2021-45460

·

تاريخ النشر

2022-01-11

·

تاريخ التحديث

2022-01-18

الوصف من

CVSS 3.1
8.1
عالية
المقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions SICAM PQ Analyzer versions prior to V3.18
Description A service is started by an unquoted registry entry, which contains spaces in its path. This allows attackers with write privilege to those directories to potentially plant executables that will run in place of the legitimate process, leading to possible persistence on the system or a denial of service.
Recommendations For versions prior to V3.18, update to version V3.18 or later to resolve the issue. As a temporary workaround, consider restricting write access to the directories containing the unquoted registry entry to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾