CVE-2022-25089 Privilege escalation in n/a
An attacker can escalate privileges by exploiting improper use of privileged APIs to modify registry values in Printix Secure Cloud Print Management.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-25089?
CVE-2022-25089 is a critical vulnerability in n/a, published on 2 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.
Weakness: CWE-269
Which versions are affected by CVE-2022-25089?
It affects 1 product.
Products include Kofax Printix.
How do I fix CVE-2022-25089?
No fix has been published for CVE-2022-25089 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-25089 being exploited?
There is no known exploitation of CVE-2022-25089 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gpfh-7qq2-c4xm.