CVE-2017-7884

CVE-2017-7884 affects the APC UPS Daemon (apcupsd) and allows a locally authenticated, unprivileged user to gain SYSTEM privileges by replacing the Windows service executable apcupsd.exe with a malicious binary that runs at startup. The issue arises from permissions on %SYSTEMDRIVE%\apcupsd\bin\a...

APC UPS Daemon 3.14.14 Privilege Escalation

Credits: fragsh3ll aka Richard Young + Contact: https://twitter.com/fragsh3ll Vendor ========== http://www.apcupsd.org Product =========== APC UPS Daemon = 3.14.14 Vulnerability Type ===================== Privilege Escalation Vendor Description ===================== Apcupsd can be used for power...