CVE-2022-38176
Published: 06 September 2022
Summary
CVE-2022-38176 is a high-severity an unspecified weakness vulnerability in Ysoft Safeq. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 32.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-40772
Vulnerability details
An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data…
more
stream. NOTE: this is not the same as CVE-2021-31859.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.