How severe is CVE-2022-38176?

CVE-2022-38176 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2022-38176 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (28th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-38176?

CVE-2022-38176 primarily affects Ysoft Safeq. In total, 41 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2022-38176?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2022-38176 published?

CVE-2022-38176 was published on 2022-09-06 and last updated on 2026-06-17.

CVE-2022-38176

CVE-2022-38176 is a high-severity vulnerability in Ysoft Safeq with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.8)
EPSS exploit prediction: 0% (28th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ysoft Safeq
Published: 2022-09-06
Last modified: 2026-06-17

Description

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.

Frequently asked questions

What is CVE-2022-38176?: An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.
How severe is CVE-2022-38176?: CVE-2022-38176 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2022-38176 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (28th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-38176?: CVE-2022-38176 primarily affects Ysoft Safeq. In total, 41 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2022-38176?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2022-38176 published?: CVE-2022-38176 was published on 2022-09-06 and last updated on 2026-06-17.

References

Affected products (41)

cpe:2.3:a:ysoft:safeq:6.0:-:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build32:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build33:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build34:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build35:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build36:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build37:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build38:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build39:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build40:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build41:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build42:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build43:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build44:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build45:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build46:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build47:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build48:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build49:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build50:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build51:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build52:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build53:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build54:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build55:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build56:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build57:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build58:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build59:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build60:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build61:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build62:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build63:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build64:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build65:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build66:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build67:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build68:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build69:*:*:*:*:*:*
cpe:2.3:a:ysoft:safeq:6.0:build70:*:*:*:*:*:*

More vulnerabilities in Ysoft Safeq

CVE-2022-23862 — High (CVSS 7.8): A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port…
CVE-2021-31859 — High (CVSS 7.8): Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by…
CVE-2022-23861 — Medium (CVSS 5.4): Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the…

All CVEs affecting Ysoft Safeq →