← All advisories

Medium severity6.5NVD Advisory· Published Mar 31, 2022· Updated Jun 17, 2026

CVE-2022-27965

CVE-2022-27965

Description

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected products

3

Netsarang/Xlpd2 versions
cpe:2.3:a:netsarang:xlpd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netsarang:xlpd:*:*:*:*:*:*:*:*range: <=7.0.0094
- (no CPE)range: <=7.0.0094
Xlpd/Xlpddescription

Patches

Vulnerability mechanics

References

2

github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xlpd-CreateProcessW-Misuse-Binary-HijacknvdExploitThird Party Advisory
www.netsarang.com/en/xlpd-update-history/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.