CVE-2022-48223 | BDVDB-2026-199115 Detail

Description#

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuant installer to repair certificates. This call is vulnerable to DLL hijacking due to a race condition and insecure permissions on the executing directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://acuant.com
https://hackandpwn.com/disclosures/CVE-2022-48223.pdf

Exploit#

No public exploit known

History#

Version 12023-04-04Record published in the CVE List.
Version 22025-02-18Most recent update recorded in the CVE List.