Vulnerability · Published Jul 19, 2022 · Assigned by HYPR
CVE-2022-1984
Medium 4.5
In plain English
A medium-severity unsafe deserialization in HYPR Windows WFA from HYPR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Severity (CVSS 3.1)4.5Medium
Exploit odds (30 days)0.2%top 92.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HYPR | HYPR Windows WFA | unspecified – before 7.2 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- https://www.hypr.com/security-advisories/ x_refsource_MISC