CVE-2023-32232
CVSS 3.1 Score 9.9 of 10 (high)
Details
Summary
The vulnerability with the CVE ID CVE-2023-32232 affects PrinterLogic Client for Windows before version 25.0.0.836. During installation and repair, a PrinterLogic binary is called by the installer with elevated privileges, but the window is not hidden. This allows a standard user to break out of the window and gain a full SYSTEM command prompt window, resulting in arbitrary SYSTEM code execution and elevation of privileges. The vulnerability has a base severity rating of CRITICAL with a base score of 9.9 according to NIST. The exploitability score is 3.1, indicating it can be exploited relatively easily over a network without requiring user interaction. It has a high impact on both integrity and confidentiality, and the availability impact is also high. Remediation for this vulnerability would involve updating PrinterLogic Client to version 25.0.0.836 or later to mitigate the risk of complete compromise and unauthorized code execution within an organization's network environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions