Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rrv-j65x-53qp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit.

An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit.

EPSS

Процентиль: 34%
0.00135
Низкий

7.8 High

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 7.8
nvd
больше 6 лет назад

An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit.

EPSS

Процентиль: 34%
0.00135
Низкий

7.8 High

CVSS3

Дефекты

CWE-88