Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-23410

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its curre

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Axis

Description

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Axis Communications AB AXIS IP Utility

Default version status: unaffected

  • All version prior to 4.18.0affected

References