Gbgplc
Gbgplc Acuant Acufill SDK: vulnerabilidades y CVE
Gbgplc Acuant Acufill SDK tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-48224 | Alta (7.3) | 0.22% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get… |
| CVE-2022-48223 | Media (6.7) | 0.11% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuant installer to repair certificates. This call is vulnerable to DLL hijacking due to a race… |
| CVE-2022-48222 | Alta (7.8) | 0.14% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated… |
| CVE-2022-48226 | Alta (7.8) | 0.18% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code… |
| CVE-2022-48225 | Alta (7.3) | 0.20% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation process is vulnerable to DLL hijacking,… |
| CVE-2022-48221 | Alta (7.5) | 0.51% | — | 4 abr 2023 | An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten… |