CVE-2022-38611 Privilege escalation in n/a

What is CVE-2022-38611?

CVE-2022-38611 is a high-severity vulnerability in n/a, published on 16 Sep 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary.

Which versions are affected by CVE-2022-38611?

It affects 1 product.

Products include Watchdog Anti-Virus.

How do I fix CVE-2022-38611?

No fix has been published for CVE-2022-38611 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-38611 being exploited?

There is no known exploitation of CVE-2022-38611 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-42045 Code injection in n/a Medium 6.7
• CVE-2022-38582 Missing authorization in n/a Medium 6.5
• CVE-2023-1446 Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service Medium 5.5
• CVE-2023-1453 Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control Medium 4.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gw9c-5q82-2wgj.