PT-2017-16725 · Unisys · S-Par

Published 2017-04-11 · Updated 2017-04-17 · CVE-2017-5873

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unisys s-Par versions prior to 4.4.20

Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This can be demonstrated by placing a malicious program.exe file in the specified directory.

Recommendations For versions prior to 4.4.20, update to version 4.4.20 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2017-5873

Affected Products

S-Par

References · 3

• 🔥 http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5873 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5873 · Vendor Advisory