title: TERUTEN WebCube update remote code execution vulnerability
description: The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification logic to update both digitally signed and unauthorized files, enabling remote code execution.
problem types: CWE-346 Origin Validation Error
affected:
{
platforms: Windows
product: WebCube
vendor: TERUTEN Co.,Ltd
versions:
lessThan: 1.2.0.0, status: affected, version: 1.0.5.5, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]