Описание
A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
EPSS
8.8 High
CVSS3
8.8 High
CVSS3
7.2 High
CVSS2
Дефекты
Связанные уязвимости
A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.
Уязвимость программного средства Advantech DeviceOn/iService, связанная с неправильными настройками прав доступа по умолчанию, позволяющая нарушителю повысить свои привилегии
EPSS
8.8 High
CVSS3
8.8 High
CVSS3
7.2 High
CVSS2