← CVE Intelligence

CVE-2022-23410

Axis Communications AB / AXIS IP Utility PUBLISHED

Description (CNA)

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

Affected (CNA)

Vendor / productVersions
Axis Communications AB / AXIS IP Utilityaffected All version prior to 4.18.0

CWE

CWE-427

References

ADP enrichment

CVE

No English description supplied.