CVE-2022-25089
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
The vulnerability in Printix Secure Cloud Print Management up to version 1.3.1106.0 incorrectly uses privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData. This allows privilege escalation or unauthorized system changes.
Risk Assessment
The organization faces the risk of privilege escalation by a local attacker who can modify critical system registry settings, potentially leading to full system compromise or malware installation.
Recommendation
Immediately update Printix Secure Cloud Print Management to the latest version that fixes this vulnerability. If no update is available, restrict application access to trusted users only.
Original NVD description (English source)
Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.