PT-2017-17971 · Apc · Apc Ups Daemon

Fragsh3Ll + 1 · Publicado 2017-06-16 · Atualizado 2019-10-03 · CVE-2017-7884

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions APC UPS Daemon versions through 3.14.14

Description The default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges. This is possible by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup, due to "RW NT AUTHORITYAuthenticated Users" permissions for %SYSTEMDRIVE%apcupsdbinapcupsd.exe.

Recommendations For APC UPS Daemon versions through 3.14.14, consider restricting write access to the %SYSTEMDRIVE%apcupsdbinapcupsd.exe file to prevent replacement with a malicious executable. As a temporary workaround, monitor the integrity of the apcupsd.exe file to detect any unauthorized changes.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2017-7884

Produtos afetados

Apc Ups Daemon

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-7884 · Nota de Segurança
• http://securityfocus.com/bid/99092 · Nota
• https://osv.dev/vulnerability/CVE-2017-7884 · Aviso do Fabricante
• http://securitytracker.com/id/1038707 · Nota
• http://seclists.org/fulldisclosure/2017/Jun/20 · Nota