CVE-2022-27502

Published: Jun 10, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM.

Affected (1)

Products: Realvnc: Vnc Server

Realvnc

1 product

Vnc Server

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Realvnc Vnc Server	From 5.1.0 to 6.9.1

Running on/with	Platform Versions
Microsoft Windows	All versions

References (4)

https://help.realvnc.com/hc/en-us/articles/360002478311-Are-there-any-known-security-vulnerabilities-#cve-2008-4770-moderate-%E2%80%94-only-affects-vnc-viewer--0-1

Source: cve@mitre.org

Vendor Advisory

https://realvnc.com

Source: cve@mitre.org

Vendor Advisory

https://help.realvnc.com/hc/en-us/articles/360002478311-Are-there-any-known-security-vulnerabilities-#cve-2008-4770-moderate-%E2%80%94-only-affects-vnc-viewer--0-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://realvnc.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.