Access Control Flaw in Watchdog Anti-Virus by Watchdog Software
CVE-2022-38611

7.8HIGH

Key Information:

Vendor

Watchdog

Status
Anti-virus
Vendor
CVE Published:
16 September 2022

What is CVE-2022-38611?

An improper access control vulnerability in Watchdog Anti-Virus version 1.4.158 enables attackers to exploit DLL hijacking techniques. This flaw allows the execution of arbitrary code through a specially crafted binary, potentially compromising the security integrity of affected systems. Users of this software are advised to review mitigation measures and update their systems to safeguard against this vulnerability.

References

https://gist.github.com/dru1d-foofus/835423de77c3522d53b9...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.