High severity7.2NVD Advisory· Published Nov 21, 2022· Updated Jun 17, 2026
CVE-2022-40746
CVE-2022-40746
Description
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ibm:i_access_client_solutions:*:*:*:*:*:*:*:*Range: >=1.1.2,<=1.1.4
- Range: 1.1.2 - 1.1.4, 1.1.4.3 - 1.1.9.0
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6840359nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/236581nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.