Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-25958

Опубликовано: 26 мар. 2024
Источник: nvd
CVSS3: 6.7
CVSS3: 7.8
EPSS Низкий

Описание

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of application data and service disruption.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:grab:*:*:*:*:*:windows:*:*
Версия до 5.0.5 (исключая)

EPSS

Процентиль: 10%
0.00035
Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 6.7
github
почти 2 года назад

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of application data and service disruption.

EPSS

Процентиль: 10%
0.00035
Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276