Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3c8w-cf3r-86mw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM.

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM.

EPSS

Процентиль: 11%
0.00039
Низкий

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
nvd
почти 5 лет назад

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM.

CVSS3: 7.8
fstec
почти 5 лет назад

Уязвимость программного обеспечения для управления и настройки устройств защиты DIGSI 4, связанная с ошибками использования стандартных разрешений, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 11%
0.00039
Низкий

Дефекты

CWE-276