Medium severity5.9NVD Advisory· Published Sep 28, 2022· Updated Jun 17, 2026
CVE-2022-38699
CVE-2022-38699
Description
Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 5.1.5.0
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-6522-4eacb-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.