This vulnerability exists in AppSamvid software due to... · CVE-2024-25103 · GitHub Advisory Database · GitHub

This vulnerability exists in AppSamvid software due to...

Moderate severity Unreviewed Published Mar 6, 2024 to the GitHub Advisory Database • Updated Mar 6, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system.

Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.

References

Published by the National Vulnerability Database

Mar 6, 2024

Published to the GitHub Advisory Database Mar 6, 2024

Last updated Mar 6, 2024

Severity

Moderate

6.3

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H