Lucene search

K
zdiFritz Sands of the Zero Day InitiativeZDI-17-646
HistoryAug 10, 2017 - 12:00 a.m.

Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability

2017-08-1000:00:00
Fritz Sands of the Zero Day Initiative
www.zerodayinitiative.com
25

EPSS

0.001

Percentile

16.0%

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Fuji Electric Monitouch V-SFT. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of Monitouch V-SFT. The software is installed with weak access controls on the executable files. An attacker can leverage this vulnerability to execute code in the context of any user of the software.

EPSS

0.001

Percentile

16.0%

Related for ZDI-17-646