CVE-2014-2848

2022-10-0316:20:49

mitre

www.cve.org

race condition

wmi_malware_scan

local privilege escalation

nessus 5.2.1

trojan horse

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.

References

secunia.com/advisories/57403

www.securitytracker.com/id/1029946

discussions.nessus.org/thread/7195

www.nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation/