Skip to content
OpenAdvisories
High · 7.8 CVE-2022-4258 EUVD-2022-51614GHSA-m3pf-3vpc-6m5j

Hima: Unquoted path vulnerabilities in HIMA PC based Software

Published Jan 16, 2023 · Updated Apr 3, 2025 · Assigned by CERTVDE

Description

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system.

Affected products

VendorProductAffectedFixed
HIMA HOPCS 1.0.0 – ≤ 3.56.4 —
HIMA X-OPC DA 1.0.0 – ≤ 5.6.1210 —
HIMA X-OPC A+E 1.0.0 – ≤ 5.6.1210 —
HIMA X-OTS 1.0.0 – ≤ 1.32.550 —

Advisories 1

References