CVE-2022-24140

{"id": "CVE-2022-24140", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.7}]}, "published": "2022-07-06T13:15:09.313", "references": [{"url": "http://advanced.com", "tags": ["Not Applicable"], "source": "cve@mitre.org"}, {"url": "http://iobit.com", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/tomerpeled92/CVE/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-494"}]}], "descriptions": [{"lang": "en", "value": "IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file and will try to install the update automatically with ADMIN privileges. An attacker Intercepting this communication can supply the product a fake config file with malicious locations for the updates thus gaining a remote code execution on an endpoint."}, {"lang": "es", "value": "IOBit Advanced System Care versi\u00f3n 15, iTop Screen Recorder versi\u00f3n 2.1, iTop VPN versi\u00f3n 3.2, Driver Booster versi\u00f3n 9 e iTop Screenshot env\u00edan peticiones HTTP en su procedimiento de actualizaci\u00f3n para descargar un archivo de configuraci\u00f3n. Despu\u00e9s de descargar el archivo de configuraci\u00f3n, los productos analizar\u00e1n la ubicaci\u00f3n HTTP de la actualizaci\u00f3n desde el archivo e intentar\u00e1n instalar la actualizaci\u00f3n autom\u00e1ticamente con privilegios de administrador. Un atacante que intercepte esta comunicaci\u00f3n puede suministrar al producto un archivo de configuraci\u00f3n falso con ubicaciones maliciosas para las actualizaciones, obteniendo as\u00ed una ejecuci\u00f3n de c\u00f3digo remota en un endpoint"}], "lastModified": "2022-07-14T17:12:27.640", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:iobit:advanced_system_care:15:*:*:*:free:*:*:*", "vulnerable": true, "matchCriteriaId": "FF6E8D50-6B8B-43AA-9338-1A4DBE83DB34"}, {"criteria": "cpe:2.3:a:iobit:advanced_system_care:15:*:*:*:pro:*:*:*", "vulnerable": true, "matchCriteriaId": "1DA08A7C-9D84-4C40-84B4-C0541BCAB266"}, {"criteria": "cpe:2.3:a:iobit:driver_booster:9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9D2756E-6714-4D24-B06E-13AC9E1872A8"}, {"criteria": "cpe:2.3:a:iobit:itop_screen_recorder:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EE3AD53-D48B-4FA0-BCAB-FDDBA8217F73"}, {"criteria": "cpe:2.3:a:iobit:itop_screenshot:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED706F7F-0675-499C-9F7D-D69563139413"}, {"criteria": "cpe:2.3:a:iobit:itop_vpn:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D35825EC-63C8-4374-B4F4-FD88193C7895"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}