CVE-2022-23410

7.8 highEPSS 0.4%

High (7.8) in axis ip utility. EPSS 0.4% chance of exploitation in the next 30 days.

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same folder.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2022-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axis:ip_utility

References

https://www.axis.com/files/tech_notes/CVE-2022-23410.pdf
https://www.axis.com/files/tech_notes/CVE-2022-23410.pdf

Check your stack JSON