What is CVE-2022-38176?

CVE-2022-38176 is a high-severity vulnerability in Ysoft Safeq. CVSS score: 7.8/10. Published 2022-09-06.

How severe is CVE-2022-38176?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Ysoft Safeq

CVE-2022-38176

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.

EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ysoft Safeq — versions 6.0
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-38176?: CVE-2022-38176 is a high-severity vulnerability in Ysoft Safeq. CVSS score: 7.8/10. Published 2022-09-06.
How severe is CVE-2022-38176?: High severity. CVSS v3 base score is 7.8 out of 10.