CVE-2022-4258

Hima: Unquoted path vulnerabilities in HIMA PC based Software

High7.8EPSS 0.22%

Published: 16 Jan 2023
Updated: 3 Apr 2025
Reserved: 1 Dec 2022
Assigned by: CERTVDE

Description

In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe file and gain full access to the system.

Scores

CVSS scores of CVE-2022-4258, by who scored it
Scored by	CVSS	Score	Vector
CERTVDECNA (assigner)	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified	3.1	High7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.22% · top 88% of all CVEs (5 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

CWE-428 Unquoted Search Path or Element (opens in a new tab)All about CWE-428 and its CVEs

Affected products

HIMA · HOPCS
- affected 1.0.0 – ≤ 3.56.4
HIMA · X-OPC DA
- affected 1.0.0 – ≤ 5.6.1210
HIMA · X-OPC A+E
- affected 1.0.0 – ≤ 5.6.1210
HIMA · X-OTS
- affected 1.0.0 – ≤ 1.32.550

References (1)

https://cert.vde.com/en/advisories/VDE-2022-059/ (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2022-4258](https://trackcve.app/badge/CVE-2022-4258.svg)](https://trackcve.app/cve/CVE-2022-4258)

Record last updated 3 Apr 2025, 13:40 UTC.