Remote File Creation Vulnerability in TEC-IT TBarCode Software
CVE-2022-4983

6.9MEDIUM

What is CVE-2022-4983?

The TEC-IT TBarCode software, specifically version 11.15, has a vulnerability in its TBarCode11.ocx ActiveX control that arises from improper licensing handling through INI files. This flaw allows an attacker to remotely create files on the host filesystem. The repercussions of this could lead to significant security breaches, as it permits the alteration or injection of unauthorized files that may facilitate code execution or establish persistence under the context of the affected process. Proper mitigation and prompt updates are essential to safeguard against potential exploitations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

TEC-IT TBarCode 11.15

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.