CVE-2023-22283

MEDIUM Year: 2023
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-427
View all →

Vulnerability Description

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related Vulnerabilities

CVE-2019-5694

MEDIUM
CVSS:6.5(Medium)

NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (als...

CWE-4272019

CVE-2019-5695

MEDIUM
CVSS:6.5(Medium)

NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and pr...

CWE-4272019

CVE-2020-24578

MEDIUM
CVSS:6.5(Medium)

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and dow...

CWE-4272020

CVE-2020-3153

MEDIUM
CVSS:6.5(Medium)

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories wi...

CWE-4272020

CVE-2020-7358

MEDIUM
CVSS:6.5(Medium)

In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This wou...

CWE-4272020

CVE-2020-9667

MEDIUM
CVSS:6.5(Medium)

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execut...

CWE-4272020