CVE-2024-12903

CVE-2024-12903 concerns Biamp Evoko Home, affected in versions 2.4.2–2.7.4. The root cause is “incorrect default permissions” leading to full-control on the Everyone group, enabling a non-admin user with local access to escalate privileges, execute arbitrary code, and maintain persistence on the ...

CVE-2024-12903 Incorrect default permissions in Biamp Evoko Home

Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control...

Biamp Evoko Home 安全漏洞

Biamp Evoko Home is a conference room and desk reservation system from Biamp. A security vulnerability exists in Biamp Evoko Home that originates from a non-administrative user being able to exploit weak file and folder permissions to elevate privileges and execute arbitrary code...