Design/Logic Flaw

2021-12-0816:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking.

CPENameOperatorVersion
allegrolt3.3.4156.1

CPE	Name	Operator	Version
	allegro	lt	3.3.4156.1

References

www.popsy.com/Documents/Setups/Setup.Allegro.3.3.4154.2.exe

excellium-services.com/cert-xlm-advisory/CVE-2021-42110