PT-2023-22959 · Unknown · Printer Driver Packager Nx

CVE-2023-30759

·

Publicado

2023-06-19

·

Atualizado

2024-12-12

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Printer Driver Packager NX versions 1.0.02 through 1.1.25
Description The issue arises when the driver installation package created by Printer Driver Packager NX fails to detect its modification, potentially spawning an unexpected process with administrative privilege. If a non-administrative user modifies the package and runs it on a target PC, an arbitrary program may be executed with administrative privilege.
Recommendations For versions 1.0.02 through 1.1.25, as a temporary workaround, consider restricting the use of the driver installation package to prevent non-administrative users from modifying and executing it, until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Insufficient Verification of Data Authenticity

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-30759

Produtos afetados

Printer Driver Packager Nx