« Volver al listado

CVE-2022-36415

Estado: ModificadaAlta (7.8)—

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and then the uninstaller is run as SYSTEM, the DLLs will execute with elevated privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Scootersoftware — Beyond Compare

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-36415",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-23T03:15:08.447",
  "references": [
    {
      "url": "https://www.scootersoftware.com/support.php?zz=kb_security_2022-02",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.scootersoftware.com/support.php?zz=kb_security_2022-02",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\\Windows\\Temp\\ folder, and then the uninstaller is run as SYSTEM, the DLLs will execute with elevated privileges."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de secuestro de DLL en el desinstalador de Scooter Beyond Compare versiones 1.8a hasta 4.4.2 anteriores a 4.4.3 cuando es instalado por medio del instalador EXE. El desinstalador intenta cargar DLLs de una carpeta temporal de Windows. Si un usuario estándar coloca las DLL maliciosas en la carpeta C:\\Windows\\Temp\\, y luego el desinstalador es ejecutado como SYSTEM, las DLL serán ejecutadas con altos privilegios"
    }
  ],
  "lastModified": "2026-06-17T04:53:25.157",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:scootersoftware:beyond_compare:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5ADF722B-CF87-4C67-8FD9-38E9CC80063A",
              "versionEndExcluding": "4.4.3",
              "versionStartIncluding": "1.8a"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}