CyberSecBulletin

Usbview Project vulnerabilities

We track 1 vulnerability in Usbview Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 21, 2022.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest Usbview Project vulnerabilities

  • 7.8 High severity

    Usbview: Missing Authentication for Critical Functionality

    CVE-2022-23220Usbview Project

    USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --