Read the docs
TI-2022-17870 Aliases CVE-2022-38176GHSA-7q82-p4xg-89xh

An issue was discovered in YSoft SAFEQ 6 before 6.0.72.

Priority LOW 34Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the Client V3 services, allowing for local user privilege escalation by overwriting the executable file via an alternative data stream. NOTE: this is not the same as CVE-2021-31859.

Why it matters now

EPSS 0.00393 33rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 41

CPEVersionsRoleVendor
cpe:2.3:a:ysoft:safeq:6.0:-:*:*:*:*:*:*6.0VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build32:*:*:*:*:*:*6.0 build32VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build33:*:*:*:*:*:*6.0 build33VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build34:*:*:*:*:*:*6.0 build34VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build35:*:*:*:*:*:*6.0 build35VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build36:*:*:*:*:*:*6.0 build36VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build37:*:*:*:*:*:*6.0 build37VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build38:*:*:*:*:*:*6.0 build38VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build39:*:*:*:*:*:*6.0 build39VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build40:*:*:*:*:*:*6.0 build40VulnerableYSoft
  • cpe:2.3:a:ysoft:safeq:6.0:-:*:*:*:*:*:* Versions 6.0 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build32:*:*:*:*:*:* Versions 6.0 build32 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build33:*:*:*:*:*:* Versions 6.0 build33 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build34:*:*:*:*:*:* Versions 6.0 build34 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build35:*:*:*:*:*:* Versions 6.0 build35 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build36:*:*:*:*:*:* Versions 6.0 build36 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build37:*:*:*:*:*:* Versions 6.0 build37 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build38:*:*:*:*:*:* Versions 6.0 build38 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build39:*:*:*:*:*:* Versions 6.0 build39 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build40:*:*:*:*:*:* Versions 6.0 build40 Vulnerable ·YSoft
Show 31 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ysoft:safeq:6.0:build41:*:*:*:*:*:*6.0 build41VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build42:*:*:*:*:*:*6.0 build42VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build43:*:*:*:*:*:*6.0 build43VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build44:*:*:*:*:*:*6.0 build44VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build45:*:*:*:*:*:*6.0 build45VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build46:*:*:*:*:*:*6.0 build46VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build47:*:*:*:*:*:*6.0 build47VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build48:*:*:*:*:*:*6.0 build48VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build49:*:*:*:*:*:*6.0 build49VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build50:*:*:*:*:*:*6.0 build50VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build51:*:*:*:*:*:*6.0 build51VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build52:*:*:*:*:*:*6.0 build52VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build53:*:*:*:*:*:*6.0 build53VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build54:*:*:*:*:*:*6.0 build54VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build55:*:*:*:*:*:*6.0 build55VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build56:*:*:*:*:*:*6.0 build56VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build57:*:*:*:*:*:*6.0 build57VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build58:*:*:*:*:*:*6.0 build58VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build59:*:*:*:*:*:*6.0 build59VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build60:*:*:*:*:*:*6.0 build60VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build61:*:*:*:*:*:*6.0 build61VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build62:*:*:*:*:*:*6.0 build62VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build63:*:*:*:*:*:*6.0 build63VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build64:*:*:*:*:*:*6.0 build64VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build65:*:*:*:*:*:*6.0 build65VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build66:*:*:*:*:*:*6.0 build66VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build67:*:*:*:*:*:*6.0 build67VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build68:*:*:*:*:*:*6.0 build68VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build69:*:*:*:*:*:*6.0 build69VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build70:*:*:*:*:*:*6.0 build70VulnerableYSoft
cpe:2.3:a:ysoft:safeq:6.0:build71:*:*:*:*:*:*6.0 build71VulnerableYSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build41:*:*:*:*:*:* Versions 6.0 build41 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build42:*:*:*:*:*:* Versions 6.0 build42 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build43:*:*:*:*:*:* Versions 6.0 build43 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build44:*:*:*:*:*:* Versions 6.0 build44 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build45:*:*:*:*:*:* Versions 6.0 build45 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build46:*:*:*:*:*:* Versions 6.0 build46 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build47:*:*:*:*:*:* Versions 6.0 build47 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build48:*:*:*:*:*:* Versions 6.0 build48 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build49:*:*:*:*:*:* Versions 6.0 build49 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build50:*:*:*:*:*:* Versions 6.0 build50 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build51:*:*:*:*:*:* Versions 6.0 build51 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build52:*:*:*:*:*:* Versions 6.0 build52 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build53:*:*:*:*:*:* Versions 6.0 build53 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build54:*:*:*:*:*:* Versions 6.0 build54 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build55:*:*:*:*:*:* Versions 6.0 build55 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build56:*:*:*:*:*:* Versions 6.0 build56 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build57:*:*:*:*:*:* Versions 6.0 build57 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build58:*:*:*:*:*:* Versions 6.0 build58 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build59:*:*:*:*:*:* Versions 6.0 build59 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build60:*:*:*:*:*:* Versions 6.0 build60 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build61:*:*:*:*:*:* Versions 6.0 build61 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build62:*:*:*:*:*:* Versions 6.0 build62 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build63:*:*:*:*:*:* Versions 6.0 build63 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build64:*:*:*:*:*:* Versions 6.0 build64 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build65:*:*:*:*:*:* Versions 6.0 build65 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build66:*:*:*:*:*:* Versions 6.0 build66 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build67:*:*:*:*:*:* Versions 6.0 build67 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build68:*:*:*:*:*:* Versions 6.0 build68 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build69:*:*:*:*:*:* Versions 6.0 build69 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build70:*:*:*:*:*:* Versions 6.0 build70 Vulnerable ·YSoft
  • cpe:2.3:a:ysoft:safeq:6.0:build71:*:*:*:*:*:* Versions 6.0 build71 Vulnerable ·YSoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-38176
  2. 2026-10-03 Alias added: GHSA-7q82-p4xg-89xh

References

Advisory 2

  • TI-2022-07863 A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. CVSS 3.1HIGH 8.4
  • TI-2022-07862 Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6… CVSS 3.1MEDIUM 6.1
  • TI-2021-11852 Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows… CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences