Lucene search

K
zdi06fe5fd2bc53027c4a3b7e395af0b850e7b8a044ZDI-23-1885
HistoryDec 20, 2023 - 12:00 a.m.

(0Day) Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability

2023-12-2000:00:00
06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
www.zerodayinitiative.com
8
local privilege escalation
voltronic power viewpower
incorrect permission assignment
vulnerability
arbitrary code execution
system context

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

Related for ZDI-23-1885