CVE-2022-25090

HighCVSS 8.1

Published: 10/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

11.01%

95th percentile - higher than 95% of all known CVEs

Summary

A vulnerability in Printix Secure Cloud Print Management up to version 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation due to a race condition.

Risk Assessment

An attacker can exploit the race condition to replace the temp.ini file, resulting in elevated privileges and potential full control over the application or system.

Recommendation

Immediately update Printix Secure Cloud Print Management to a version later than 1.3.1106.0 where this vulnerability is fixed.

Original NVD description (English source)

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.