CVE-2023-49114

6.7 mediumEPSS 0.4%

Medium (6.7) in hexagon qognify vms client viewer. EPSS 0.4% chance of exploitation in the next 30 days.

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2024-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hexagon:qognify_vms_client_viewer

References

http://seclists.org/fulldisclosure/2024/Mar/10
https://r.sec-consult.com/qognify
http://seclists.org/fulldisclosure/2024/Mar/10
https://r.sec-consult.com/qognify

Check your stack JSON