CVE-2022-48224

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges).

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Apr 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-482257.3An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto CVE-2022-482267.8An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standa CVE-2022-482277.8An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the inst CVE-2022-482285.5An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer CVE-2022-48235.9A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controll CVE-2022-482307.5There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.CVE-2022-482315.5In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priv CVE-2022-482325.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482335.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482345.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482354.4In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Syste CVE-2022-482364.4In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System