Lucene search

MitreCVE-2023-45883

HistoryOct 19, 2023 - 1:15 p.m.

CVE-2023-45883

2023-10-1913:15:10

CWE-269

mitre

web.nvd.nist.gov

cve-2023-45883

privilege escalation

qumu multicast extension

windows

nvd

vulnerability

code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYSTEM privileges. Standard users may use this to gain arbitrary code execution as SYSTEM.

Affected configurations

Nvd

Node

enghousequmuRange2.0.0–2.0.63

AND

microsoftwindowsMatch-

VendorProductVersionCPE
enghousequmu*cpe:2.3:a:enghouse:qumu:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
enghouse	qumu	*	cpe:2.3:a:enghouse:qumu::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

References

hackandpwn.com/disclosures/CVE-2023-45883.pdf

www.vidyo.com/enterprise-video-management/qumu

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-45883