CVE-2021-45912

2022-01-0415:10:37

mitre

www.cve.org

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.

References

controlup.com

www.controlup.com/security/security-advisory-local-privilege-escalation/