VULNERABILITY INTELLIGENCE

CVE-2023-49114

CVSS score6.7 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2024-02-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

Weakness classification

551230f0-3615-47bd-b7cc-93e92e730bbf: CWE-427
nvd@nist.gov: CWE-427

Primary references

551230f0-3615-47bd-b7cc-93e92e730bbf — Exploit, Mailing List, Third Party Advisory
551230f0-3615-47bd-b7cc-93e92e730bbf — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory