CVE-2024-22410

CVE-2024-22410 describes a DLL hijacking vulnerability in the Windows binary of the Creditcoin node, where an attacker with write access to the program files directory could replace legitimate Microsoft DLLs to execute arbitrary code. This vulnerability carries a CVSS score of 7.8 (HIGH), indicating a local attack vector with low complexity, requiring low privileges, and potentially leading to high impact on confidentiality, integrity, and availability. Despite the high CVSS score, the Creditcoin development team views this as a low-security risk, considering Windows support experimental and unofficial. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.