Remote File Creation Vulnerability in TEC-IT TBarCode Software

CVE-2022-4983

What is CVE-2022-4983?

The TEC-IT TBarCode software, specifically version 11.15, has a vulnerability in its TBarCode11.ocx ActiveX control that arises from improper licensing handling through INI files. This flaw allows an attacker to remotely create files on the host filesystem. The repercussions of this could lead to significant security breaches, as it permits the alteration or injection of unauthorized files that may facilitate code execution or establish persistence under the context of the affected process. Proper mitigation and prompt updates are essential to safeguard against potential exploitations.

References