PT-2017-7172 · Vertiv · Liebert Multilink Automated Shutdown

Published 2017-04-10 · Updated 2021-08-31 · CVE-2015-7260

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Liebert MultiLink Automated Shutdown version 4.2.4

Description The issue allows local users to gain privileges by replacing the LiebertM executable file.

Recommendations For version 4.2.4, consider restricting access to the LiebertM executable file to prevent unauthorized replacement until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-7260

Affected Products

Liebert Multilink Automated Shutdown

References · 2

• https://stealthsploit.com/2015/10/27/vulnerability-disclosures · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-7260 · Security Note