Unauthorized Remote Code Execution in IOBit Products

CVE-2022-24140

What is CVE-2022-24140?

IOBit Advanced System Care, along with several other IOBit products, is vulnerable to a remote code execution attack due to improper handling of HTTP requests during software updates. When these products attempt to download configuration files to facilitate updates, they can be manipulated by an attacker intercepting the communication. By supplying a malicious config file, an attacker can redirect the update process to a harmful location, potentially allowing arbitrary code execution with elevated privileges on the user's system.

References