VULNERABILITY INTELLIGENCE

CVE-2022-48224

CVSS score7.3 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2023-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges).

Weakness classification

  • nvd@nist.gov: CWE-427

Primary references