CVE Catalog

CVE-2022-31877

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

32th percentile - higher than 32% of all known CVEs

Summary

An issue in the MSI.TerminalServer.exe component of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet.

Risk Assessment

An attacker can gain elevated privileges on the system, potentially leading to full device compromise and access to sensitive data.

Recommendation

Immediately update MSI Center to the latest available version and restrict TCP port access used by MSI.TerminalServer.exe to trusted hosts only.

Other vulnerabilities in MSI Center

Original NVD description (English source)

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS