CVE-2022-48221

Vulnerability

Acuant AcuFill SDK before version 10.22.02.03 contains a privilege escalation vulnerability. Multiple MSI files are executed from a directory writable by standard users. Due to a race condition combined with OpLock manipulation, a standard user can overwrite these MSI files before the elevated installer executes them.

Exploitation

An attacker needs only standard user privileges on the affected system. By exploiting a race window and using OpLock operations, the attacker can overwrite the MSI files with malicious content before the installer accesses them. No additional authentication or network access is required.

Impact

Successful exploitation results in full SYSTEM-level code execution. The attacker gains elevated privileges, allowing complete control over the system, including the ability to install software, modify data, and create new accounts.

Mitigation

The vendor has addressed this issue in Acuant AcuFill SDK version 10.22.02.03. Administrators should update to this fixed version. No workaround details are provided in the available reference [1]. If updating is not possible, consider restricting write access to the affected directories, though no specific instructions are given.