CVE-2017-14124

Опубликовано: 13 сент. 2017

Источник: nvd

CVSS3: 6.3

CVSS2: 3.3

EPSS Низкий

Описание

In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.

Ссылки

https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124
Vendor Advisory
https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:unicon-software:rp:*:*:*:*:ltsr:*:*:*

Версия до 5.5.0 (включая)

cpe:2.3:a:unicon-software:rp:*:*:*:*:cr:*:*:*

Версия до 5.6.0 (включая)

cpe:2.3:a:unicon-software:rp:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.2:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.7.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.7.1:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.8.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.9.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.10.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.11.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.11.1:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.11.3:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:4.11.5:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.4.0:*:*:*:*:*:*:*

cpe:2.3:a:unicon-software:rp:5.4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00038

Низкий

6.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-63mp-43q7-2qj2