CVE-2023-25396: High severity caphyon advanced installer vulnerability
Published Feb 8, 2023
·Updated
Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files.
Affected Software
1 affected component
Caphyon Advanced Installer<=20.0
Event History
Feb 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID for this privilege escalation vulnerability?
The vulnerability ID is CVE-2023-25396.
2
What is the affected software for this vulnerability?
The affected software is Caphyon Advanced Installer version 20.0 and below.
3
What is the severity of CVE-2023-25396?
The severity of CVE-2023-25396 is high with a CVSS score of 7.8.
4
How can attackers exploit this vulnerability?
Attackers can exploit this vulnerability to gain unauthorized access and manipulate system files.
5
Is there a fix for CVE-2023-25396?
Yes, a fix for CVE-2023-25396 is available in version 20.1 of Caphyon Advanced Installer.