An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten by a standard user. They then get executed by the elevated installer. This gives a standard user full SYSTEM code execution (elevation of privileges).
References
| Link | Resource |
|---|---|
| https://acuant.com | Not Applicable |
| https://acuant.com | Not Applicable |
| https://hackandpwn.com/disclosures/CVE-2022-48221.pdf | Third Party Advisory |
| https://hackandpwn.com/disclosures/CVE-2022-48221.pdf | Third Party Advisory |
Configurations
History
18 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://acuant.com - Not Applicable | |
| References | () https://hackandpwn.com/disclosures/CVE-2022-48221.pdf - Third Party Advisory |
11 Apr 2023, 15:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gbgplc:acuant_acufill_sdk:*:*:*:*:*:*:*:* | |
| CWE | CWE-362 | |
| References | (MISC) https://acuant.com - Not Applicable | |
| References | (MISC) https://hackandpwn.com/disclosures/CVE-2022-48221.pdf - Third Party Advisory | |
| First Time |
Gbgplc
Gbgplc acuant Acufill Sdk |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
04 Apr 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-04 15:15
Updated : 2025-02-18 17:15
NVD link : CVE-2022-48221
Mitre link : CVE-2022-48221
JSON object : View
Products Affected
gbgplc
- acuant_acufill_sdk
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')