Lucene search

MitreCVE-2023-45252

HistoryDec 01, 2023 - 6:15 a.m.

CVE-2023-45252

2023-12-0106:15:47

CWE-427

mitre

web.nvd.nist.gov

cve

dll hijacking

vulnerability

huddly huddlycameraservice

privilege escalation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges.

Affected configurations

Nvd

Node

huddlyhuddlycameraserviceRange<8.0.7

AND

microsoftwindowsMatch-

VendorProductVersionCPE
huddlyhuddlycameraservice*cpe:2.3:a:huddly:huddlycameraservice:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huddly	huddlycameraservice	*	cpe:2.3:a:huddly:huddlycameraservice::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

References

www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253/

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-45252