[{"vendor":"qognify","product":"vms_client_viewer","defaultStatus":"unknown","cpes":["cpe:2.3:a:qognify:vms_client_viewer:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7.1","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-08-14T14:20:29.383621Z","id":"CVE-2023-49114","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Qognify","product":"VMS Client Viewer","defaultStatus":"unaffected","versions":[{"version":">=7.1","status":"affected"}]}]

CWE-427

OR
          *cpe:2.3:a:hexagon:qognify_vms_client_viewer:*:*:*:*:*:*:*:* versions from (including) 7.1 

CVE: http://seclists.org/fulldisclosure/2024/Mar/10 Types: Exploit, Mailing List, Third Party Advisory

CVE: https://r.sec-consult.com/qognify Types: Exploit, Third Party Advisory

SEC Consult Vulnerability Lab: http://seclists.org/fulldisclosure/2024/Mar/10 Types: Exploit, Mailing List, Third Party Advisory

SEC Consult Vulnerability Lab: https://r.sec-consult.com/qognify Types: Exploit, Third Party Advisory

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

http://seclists.org/fulldisclosure/2024/Mar/10

https://r.sec-consult.com/qognify

CISA-ADP AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

SEC-VLab http://seclists.org/fulldisclosure/2024/Mar/10 [No types assigned]

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met.

SEC-VLab CWE-427

SEC-VLab https://r.sec-consult.com/qognify [No types assigned]