PT-2022-12365
CVE-2021-45460
·
Published
2022-01-11
·
Updated
2022-01-18
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SICAM PQ Analyzer versions prior to V3.18
Description
A service is started by an unquoted registry entry, which contains spaces in its path. This allows attackers with write privilege to those directories to potentially plant executables that will run in place of the legitimate process, leading to possible persistence on the system or a denial of service.
Recommendations
For versions prior to V3.18, update to version V3.18 or later to resolve the issue. As a temporary workaround, consider restricting write access to the directories containing the unquoted registry entry to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾