CVE-2024-22042

Summary

CVE-2024-22042 is a newly discovered vulnerability affecting all versions of Unicam FX. The issue stems from the windows installer agent in the product, which erroneously utilizes privileged APIs. This misuse leads to the Windows Console Host (conhost.exe) being launched as a child process with SYSTEM privileges. Such a scenario presents an opportunity for attackers to execute local privilege escalation attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.