CVE-2022-24140
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-24140
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file and will try to install the update automatically with ADMIN privileges. An attacker Intercepting this communication can supply the product a fake config file with malicious locations for the updates thus gaining a remote code execution on an endpoint.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款IOBit产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IOBit Advanced System Care Free等都是英国IOBit公司的产品。IOBit Advanced System Care Free是一款系统管理实用程序。iTop Screen Recorder等都是iTop公司的产品。iTop Screen Recorder是一款功能强大的免费 Windows 屏幕录像机。iTop VPN是一款 VPN 软件。 IOBit Advanced System Care 15、iTop Screen Recorder 2.1、iTop VPN 3.2
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-24140
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-24140
请登录查看更多情报信息。
- Advanced Interconnections | Interconnect Solutionsx_refsource_MISC
- http://iobit.comx_refsource_MISC
- https://github.com/tomerpeled92/CVE/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-24140
Same Patch Batch · n/a · 2022-07-06 · 30 CVEs total
| CVE-2022-30929 | Mini-Tmall 安全漏洞 | |
| CVE-2022-2318 | Linux kernel 资源管理错误漏洞 | |
| CVE-2022-32290 | Northern.tech Mender 安全漏洞 | |
| CVE-2022-30591 | quic-go 资源管理错误漏洞 | |
| CVE-2022-32386 | Tenda AC23 缓冲区错误漏洞 | |
| CVE-2022-32385 | Tenda AC23 缓冲区错误漏洞 | |
| CVE-2022-32383 | Tenda AC23 缓冲区错误漏洞 | |
| CVE-2021-31676 | PESCMS 跨站脚本漏洞 | |
| CVE-2021-31677 | PESCMS 跨站请求伪造漏洞 | |
| CVE-2021-31679 | PESCMS 跨站请求伪造漏洞 | |
| CVE-2021-31678 | PESCMS 跨站请求伪造漏洞 | |
| CVE-2022-28935 | 多款TOTOLINK产品命令注入漏洞 | |
| CVE-2022-24138 | IOBit Advanced System Care (Asc.exe) 15、Action Download Center 安全漏洞 | |
| CVE-2022-24139 | IOBit Advanced System Care Free 安全漏洞 | |
| CVE-2022-24141 | iTop VPN 安全漏洞 | |
| CVE-2021-4234 | OpenVPN 安全漏洞 | |
| CVE-2021-3695 | grub2 缓冲区错误漏洞 | |
| CVE-2021-3696 | grub2 缓冲区错误漏洞 | |
| CVE-2021-3697 | grub2 缓冲区错误漏洞 | |
| CVE-2022-33737 | OpenVPN 日志信息泄露漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2022-24140
No comments yet