The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
https://github.com/kkent030315/CVE-2022-42046 | third party advisory exploit |
https://store.steampowered.com/app/1252600 | third party advisory product |
https://www.wfs.games/news/20221220_02.html | vendor advisory |
https://wp.another-eden.jp/index.php/news/20221220_2/ | third party advisory |
https://twitter.com/rpg_AE/status/1605041933801250817 | third party advisory |