PT-2022-19230 · Unknown · Contents To Window
CVSS v3.1
4.6
Medium
| Vector | AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Contents To Window versions prior to SMR May-2022 Release 1
Description
The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a physical attacker.
Recommendations
For versions prior to SMR May-2022 Release 1, apply the patch that blocks the entry point of the vulnerability to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Contents To Window