PT-2024-15262 · Softmaker+1 · Softmaker Office 2024+3

Michael Baer · Published 2024-06-27 · Updated 2024-08-01 · CVE-2023-7270

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SoftMaker Office 2024 / NX versions prior to revision 1214 SoftMaker FreeOffice 2014 versions prior to revision 1215 SoftMaker FreeOffice 2021 (no fix available)

Description An issue was discovered in the SoftMaker Office and FreeOffice MSI installer files, which produce a visible conhost.exe window running as the SYSTEM user when using the repair function of msiexec.exe. This allows a local, low-privileged attacker to use a chain of actions to open a fully functional cmd.exe with the privileges of the SYSTEM user.

Recommendations For SoftMaker Office 2024 / NX versions prior to revision 1214, update to revision 1214 or later. For SoftMaker FreeOffice 2014 versions prior to revision 1215, update to revision 1215 or later. For SoftMaker FreeOffice 2021, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the repair function of msiexec.exe to minimize the risk of exploitation.

Exploit

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2023-7270

Affected Products

Softmaker Freeoffice 2014

Softmaker Freeoffice 2021

Softmaker Office 2024

Msiexec.Exe

References · 6

• 🔥 https://r.sec-consult.com/softmaker · Exploit
• https://softmaker.de/download/servicepacks · Patch
• https://freeoffice.com/de/download/servicepacks · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-7270 · Security Note
• https://t.me/cvenotify/84624 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Jul/5 · Note