Lucene search

K
cveMitreCVE-2023-45253
HistoryDec 01, 2023 - 6:15 a.m.

CVE-2023-45253

2023-12-0106:15:47
CWE-269
mitre
web.nvd.nist.gov
14
cve-2023-45253
huddly
huddlycameraservice
file manipulation
privilege escalation
log4net

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

9.0%

An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers to manipulate files and escalate privileges via RollingFileAppender.DeleteFile method performed by the log4net library.

Affected configurations

Nvd
Node
huddlyhuddlycameraservicesRange<8.0.7
AND
microsoftwindowsMatch-
VendorProductVersionCPE
huddlyhuddlycameraservices*cpe:2.3:a:huddly:huddlycameraservices:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2023-45253