PT-2022-12365
CVE-2021-45460
·
تاريخ النشر
2022-01-11
·
تاريخ التحديث
2022-01-18
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SICAM PQ Analyzer versions prior to V3.18
Description
A service is started by an unquoted registry entry, which contains spaces in its path. This allows attackers with write privilege to those directories to potentially plant executables that will run in place of the legitimate process, leading to possible persistence on the system or a denial of service.
Recommendations
For versions prior to V3.18, update to version V3.18 or later to resolve the issue. As a temporary workaround, consider restricting write access to the directories containing the unquoted registry entry to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾