Vulnerability · Published Nov 12, 2025 · Assigned by VulnCheck

CVE-2022-4983TEC-IT TBarCode SDK 11.15 Remote File Create

Medium 6.9

In plain English

A medium-severity security flaw in TEC-IT TBarCode from TEC-IT Datenverarbeitung GmbH, Austria. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.4%top 64.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling (INI-file based) that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow attackers to write files that lead to code execution or persistence under the context of the hosting process.

Affected products (as reported)

Vendor	Product	Versions
TEC-IT Datenverarbeitung GmbH, Austria	TEC-IT TBarCode	11.15

Weakness: CWE-73 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://www.tec-it.com/en/software/barcode-software/tbarcode/history/v10/Default.aspx release-notes, patch
https://www.vulncheck.com/advisories/tec-it-tbarcode-sdk-remote-file-create third-party-advisory