CVE-2022-4258 — Hima: Unquoted path vulnerabilities in HIMA PC based Software

CVE-2022-4258

Hima: Unquoted path vulnerabilities in HIMA PC based Software PUBLISHED

Description (CNA)

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system.

Affected (CNA)

Vendor / product	Versions
HIMA / HOPCS	affected 1.0.0 through 3.56.4
HIMA / X-OPC DA	affected 1.0.0 through 5.6.1210
HIMA / X-OPC A+E	affected 1.0.0 through 5.6.1210
HIMA / X-OTS	affected 1.0.0 through 1.32.550

CWE

CWE-428

References

https://cert.vde.com/en/advisories/VDE-2022-059/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2022-059/

CISA-ADP

No English description supplied.

No references supplied.