Vulnerability · Published Sep 6, 2023 · Assigned by zdi

CVE-2023-32163Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability

High 7.8

In plain English

A high-severity security flaw in Drivers for Windows from Wacom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.0)7.8High

Exploit odds (30 days)0.4%top 70.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Tablet Service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-16857.

Affected products (as reported)

Vendor	Product	Versions
Wacom	Drivers for Windows	6.3.45-1

Weakness: CWE-59 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Zero Day Initiative Security Advisory ZDI-23-742 x_research-advisory