Design/Logic Flaw

2017-06-1516:29:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.4%

JSON

In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.

CPENameOperatorVersion
flexnet_publisherle11.14.1

CPE	Name	Operator	Version
	flexnet_publisher	le	11.14.1

References

ics-cert.us-cert.gov/advisories/ICSA-18-144-01

secuniaresearch.flexerasoftware.com/advisories/76368/

www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager

www.schneider-electric.com/en/download/document/SEVD-2018-046-01/

www.schneider-electric.com/en/download/document/SEVD-2018-137-01/

www.schneider-electric.com/en/download/document/SEVD-2018-144-01/