CVE-2022-32427

{"id": "CVE-2022-32427", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-08-25T02:15:19.660", "references": [{"url": "https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm?tocpath=_____9", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.printerlogic.com/security-bulletin/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content. This issue has been resolved in PrinterLogic Windows Client 25.0.0688 and all affected are advised to upgrade."}, {"lang": "es", "value": "El cliente de Windows de PrinterLogic hasta la versi\u00f3n 25.0.0.676 permite que los atacantes ejecuten el cruce de directorios. Los usuarios autentificados con conocimiento previo del nombre de archivo del controlador podr\u00edan aprovechar esta situaci\u00f3n para escalar privilegios o distribuir contenido malicioso. Este problema se ha resuelto en PrinterLogic Windows Client 25.0.0688 y se recomienda a todos los afectados que actualicen"}], "lastModified": "2023-02-10T15:46:16.637", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:printerlogic:windows_client:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A39FAAB6-59AA-4860-8842-8FCC3ACEC294", "versionEndExcluding": "25.0.0688"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}