CVE-2022-23410

HIGH

AXIS IP Utility < 4.18.0 - Remote Code Execution and Local Privilege Escalation via DLL Hijacking

Title source: llm
STIX 2.1

Description

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0037
EPSS Percentile 28.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (1)
axis/ip_utility < 4.18.0
Published Feb 14, 2022
Tracked Since Feb 18, 2026