CVE-2023-45253

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 1, 2023
Updated: Dec 8, 2023
CWE ID 269

Summary

CVE-2023-45253 is a vulnerability affecting Huddly HuddlyCameraService versions prior to 8.0.7. The issue lies in the use of the log4net library's RollingFileAppender.DeleteFile method, which can be exploited by attackers to manipulate files and escalate privileges. This vulnerability poses a significant risk, as it allows unauthorized access and modification to critical system files. Successful exploitation could result in serious consequences, including system compromise and data loss. It is essential that affected users update to Huddly HuddlyCameraService version 8.0.7 or later to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share