CVE-2022-32427

CVSS V2 None CVSS V3 High 8.8
Description
PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content. This issue has been resolved in PrinterLogic Windows Client 25.0.0688 and all affected are advised to upgrade.
Overview
  • CVE ID
  • CVE-2022-32427
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-08-25T02:15:19
  • Last Modified Date
  • 2023-02-10T15:46:16
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:printerlogic:windows_client:*:*:*:*:*:*:*:* 1 OR 25.0.0.676
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • LOW
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 8.8
  • Base Severity
  • HIGH
  • Exploitability Score
  • 2.8
  • Impact Score
  • 5.9
History
Created Old Value New Value Data Type Notes
2022-08-25 03:00:16 Added to TrackCVE
2023-02-11 03:16:11 2023-02-10T15:46:16 CVE Modified Date updated
2023-02-11 03:16:11 Undergoing Analysis Analyzed Vulnerability Status updated