CVE-2022-32427

· HIGHAnalyzed

← All CVEs

CVSS v3.1

8.8

EPSS

1.43%

Published

Aug 24, 2022

Modified

Jan 22, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content. This issue has been resolved in PrinterLogic Windows Client 25.0.0688 and all affected are advised to upgrade.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-22

Affected Products (1)

printerlogic · windows_client (up to 25.0.0.688)vulnerable

References (4)

https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9

Release NotesVendor Advisory

https://www.printerlogic.com/security-bulletin/

Vendor Advisory

https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9

Release NotesVendor Advisory

https://www.printerlogic.com/security-bulletin/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs