PT-2022-16662

CVE-2022-24387

·

Published

2022-03-14

·

Updated

2024-10-16

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SmarterTrack version 100.0.8019.14010
Description The application can be tricked into overwriting files in the app data/Config folder, such as the systemsettings.xml file, with administrator or admin privileges.
Recommendations For SmarterTrack version 100.0.8019.14010, consider restricting access to the app data/Config folder to prevent unauthorized file overwrites until a patch is available. As a temporary workaround, limit administrator privileges to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾