Untrusted Search Path Vulnerability in ELECOM Camera Assistant and QuickFileDealer
CVE-2023-22368

7.8HIGH

Key Information:

Vendor
Elecom Co.,ltd.
Status
Elecom Camera Assistant And Quickfiledealer
Vendor
CVE Published:
15 February 2023

Summary

ELECOM Camera Assistant and QuickFileDealer contain an untrusted search path vulnerability that allows attackers to exploit the software via a Trojan horse DLL. This security flaw can facilitate privilege escalation if a malicious DLL is placed in an unspecified directory, potentially compromising the software's integrity and user data.

Affected Version(s)

ELECOM Camera Assistant and QuickFileDealer ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier

References

https://www.elecom.co.jp/news/security/20230214-01/
https://jvn.jp/en/jp/JVN60263237/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.