CVE-2023-49114
Local Privilege Escalation via DLL Hijacking
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Qognify · VMS Client ViewerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →