CVE-2023-25396
First published: Wed Feb 08 2023(Updated: )
Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Caphyon Advanced Installer | <=20.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this privilege escalation vulnerability?
The vulnerability ID is CVE-2023-25396.
What is the affected software for this vulnerability?
The affected software is Caphyon Advanced Installer version 20.0 and below.
What is the severity of CVE-2023-25396?
The severity of CVE-2023-25396 is high with a CVSS score of 7.8.
How can attackers exploit this vulnerability?
Attackers can exploit this vulnerability to gain unauthorized access and manipulate system files.
Is there a fix for CVE-2023-25396?
Yes, a fix for CVE-2023-25396 is available in version 20.1 of Caphyon Advanced Installer.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/caphyon
- canonical/caphyon advanced installer
- version/caphyon advanced installer/20.0