PT-2014-8558 · Estsoft · Alupdate

Publicado 2014-11-03 · Atualizado 2017-09-08 · CVE-2014-8494

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ESTsoft ALUpdate version 8.5.1.0.0

Description The issue concerns weak permissions set for the AlUpdate folder and AlUpdate.exe, allowing local users to gain privileges through a Trojan horse file. This could potentially lead to unauthorized access and control.

Recommendations For ESTsoft ALUpdate version 8.5.1.0.0, consider restricting access to the AlUpdate folder and AlUpdate.exe to prevent local users from exploiting the weak permissions and gaining unauthorized privileges.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8494

Produtos afetados

Alupdate

Referências · 4

• 🔥 http://packetstormsecurity.com/files/128868/ESTsoft-ALUpdate-8.5.1.0.0-Privilege-Escalation.html · Exploit
• http://securityfocus.com/bid/70790 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98315 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8494 · Nota de Segurança