PT-2024-28012 · Unknown+1 · Prunsrv.Exe+1

Lukas Krieg · Published 2024-09-02 · Updated 2024-09-07 · CVE-2024-38456

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HIGH-LEIT versions 04.25.00.00 through 04.25.01.01 HIGH-LEIT version 05.08.01.03

Description The issue concerns an insecure file and folder permissions vulnerability in the prunsrv.exe file. This vulnerability can be exploited by a regular user to escalate privileges and execute arbitrary code in the context of NT AUTHORITYSYSTEM.

Recommendations For HIGH-LEIT versions 04.25.00.00 through 04.25.01.01, consider restricting access to the prunsrv.exe file until a patch is available. For HIGH-LEIT version 05.08.01.03, consider restricting access to the prunsrv.exe file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-38456

Affected Products

High-Leit

Prunsrv.Exe

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-38456 · Security Note
• https://vivavis.com/en/vivavis-high-leit-rce-vulnerability-cve-2024-38456 · Note
• https://twitter.com/CVEnew/status/1831034462303301763 · Twitter Post
• https://twitter.com/cracbot/status/1832660227046699299 · Twitter Post
• https://schutzwerk.com/blog/schutzwerk-sa-2024-001 · Note
• https://t.me/cvedetector/4703 · Telegram Post
• https://vivavis.com/en/solution/scada-en/high-leit · Note
• https://twitter.com/buaqbot/status/1830817803399524701 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1830804141767049312 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Sep/0 · Note