CVE-2022-34109
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability in MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to the \PromoPhoto\ directory, regardless of file type or size.
Risk Assessment
An attacker can inject malicious files (e.g., scripts, executables) into the system, potentially leading to remote code execution, privilege escalation, or persistent system compromise.
Recommendation
Immediately update MSI Feature Navigator to the latest version or temporarily restrict write permissions to the \PromoPhoto\ directory.
Other vulnerabilities in MSI Feature Navigator
See all- CVE-2022-34110Medium
An issue in MSI Feature Navigator v1.0.1808.0901 allows attackers to download arbitrary files from the system, regardless of file type or size.
- CVE-2022-34108High
A vulnerability in the Feature Navigator of Micro-Star International MSI Feature Navigator version 1.0.1808.0901 allows attackers to cause a Denial of Service (DoS) via a crafted image or video file.
Original NVD description (English source)
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to the directory \PromoPhoto\, regardless of file type or size.