PT-2017-16725 · Unisys · S-Par

Publicado 2017-04-11 · Atualizado 2017-04-17 · CVE-2017-5873

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unisys s-Par versions prior to 4.4.20

Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This can be demonstrated by placing a malicious program.exe file in the specified directory.

Recommendations For versions prior to 4.4.20, update to version 4.4.20 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2017-5873

Produtos afetados

S-Par

Referências · 3

• 🔥 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5873 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5873 · Aviso do Fabricante