CVE-2022-23334
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
The vulnerability in the Robot application in Ip-label Newtest before v8.5R0 uses weak signature checks on executed binaries. This allows an attacker with write access to replace NEWTESTREMOTEMANAGER.EXE and escalate privileges.
Risk Assessment
The risk is that an attacker can gain elevated privileges and execute arbitrary code in the application context, potentially compromising the entire system.
Recommendation
Immediately update Ip-label Newtest to version v8.5R0 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.