Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fwr2-jm98-62vc

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.

EPSS

Процентиль: 2%
0.00015
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 месяца назад

A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code.

CVSS3: 7.8
fstec
около 1 месяца назад

Уязвимость среды разработки программного обеспечения TIA Administrator, связанная с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

EPSS

Процентиль: 2%
0.00015
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-284