CVE-2022-48199
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The resulting binary execution will occur in the context of any user running NetWorx. If an attacker modifies the Notifications function to execute a malicious binary, the binary will be executed by every user running NetWorx on that system.
SoftPerfect NetWorx 7.1.1 en Windows permite a un atacante ejecutar un binario malicioso con privilegios potencialmente más altos a través de una cuenta de usuario con pocos privilegios que abusa de la función de Notificaciones. La función de Notificaciones permite la ejecución binaria arbitraria y puede ser modificada por cualquier usuario. La ejecución binaria resultante se producirá en el contexto de cualquier usuario que ejecute NetWorx. Si un atacante modifica la función de Notificaciones para ejecutar un binario malicioso, cada usuario que ejecute NetWorx en ese sistema ejecutará el binario.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-01-01 CVE Reserved
- 2023-01-24 CVE Published
- 2024-08-03 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://giuliamelottigaribaldi.com/cve-2022-48199 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.softperfect.com/products/changelog.php?product_id=2 | 2023-02-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Softperfect Search vendor "Softperfect" | Networx Search vendor "Softperfect" for product "Networx" | 7.1.1 Search vendor "Softperfect" for product "Networx" and version "7.1.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|