CVE-2023-31468

CVE-2023-31468 affects Inosoft VisiWin 7 through 2022-2.1. The issue arises from insecure/weak permissions set on the folder C:\Program Files (x86)\INOSOFT GmbH, enabling a low-privilege user to drop a Trojan horse file that can execute with SYSTEM privileges, leading to privilege escalation. The...

CVE-2023-31468: Incorrect Default Permissions

An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 Runtime RT7.3 RC3 20221209.5. The "%PROGRAMFILESX86%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version...