CVE-2022-23922 MEDIUM

CVE-2022-23922: WIN-911 2021 Incorrect Default Permissions

Vendor Win-911
Product WIN-911
Weakness CWE-276
Published February 24, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

5.6/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

Key dates

02Disclosure timeline

February 24, 2022 CVE published
April 16, 2025 Record updated