Code injection

2014-12-0301:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.3%

JSON

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.

CPENameOperatorVersion
fixed_assets_csle13.1.4

CPE	Name	Operator	Version
	fixed_assets_cs	le	13.1.4

References

www.information-paradox.net/2014/12/cve-2014-9141-thomson-reuters-fixed.html

www.exploit-db.com/exploits/35423