Vulnerability · Published Feb 26, 2024 · Assigned by SEC-VLab
CVE-2023-49114Local Privilege Escalation via DLL Hijacking
Medium 6.7
In plain English
A medium-severity uncontrolled search path in VMS Client Viewer from Qognify. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.4%top 70.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Qognify | VMS Client Viewer | >=7.1 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://r.sec-consult.com/qognify third-party-advisory
- http://seclists.org/fulldisclosure/2024/Mar/10