CVE-2022-23410
- State
- Published
- Severity
- Not scored
- Published
- Feb 14, 2022
- Updated
- Nov 8, 2024
- Reserved
- Jan 18, 2022
Description
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.
Scores
The record has no CVSS score.
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
AXIS IP UtilityAxis Communications AB |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.