Vulnerability in Iobit Advanced Systemcare
CVE-2022-24138
IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to wait for CreateProcess and switch the genuine component with a malicious executable thus gaining code execution as a high privilege user (Low Privilege -> high integrity ADMIN).
EPSS: 0.006 (43.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Iobit Advanced_systemcare — versions 15
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- af854a3a-2127-422b-91ae-364da2661108 (x_refsource_MISC, Not Applicable)
- af854a3a-2127-422b-91ae-364da2661108 (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-24138?
- CVE-2022-24138 is a high-severity vulnerability in Iobit Advanced Systemcare, classified under Files or Directories Accessible to External Parties. CVSS score: 7.8/10. Published 2022-07-06.
- How severe is CVE-2022-24138?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2022-24138 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.