CVE-2022-48224 | BDVDB-2026-199116 Detail

Description#

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://acuant.com
https://hackandpwn.com/disclosures/CVE-2022-48224.pdf

Exploit#

No public exploit known

History#

Version 12023-04-04Record published in the CVE List.
Version 22025-02-18Most recent update recorded in the CVE List.