PT-2022-12365

CVE-2021-45460

·

Published

2022-01-11

·

Updated

2022-01-18

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions SICAM PQ Analyzer versions prior to V3.18
Description A service is started by an unquoted registry entry, which contains spaces in its path. This allows attackers with write privilege to those directories to potentially plant executables that will run in place of the legitimate process, leading to possible persistence on the system or a denial of service.
Recommendations For versions prior to V3.18, update to version V3.18 or later to resolve the issue. As a temporary workaround, consider restricting write access to the directories containing the unquoted registry entry to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾