| Titel | Topaz SERVCore® Teller Installer V2.14.0-RC2 [2.14.1] Local Privilege Escalation |
|---|
| Beschreibung | A local privilege escalation vulnerability was identified in the installation routine of SERVCore® Teller version V2.14.0-RC2 [2.14.1]. The issue is caused by improper permission handling of the service binary installation directory, allowing unprivileged users to replace the service binary with a malicious executable, which is then executed with SYSTEM privileges upon reboot. |
|---|
| Quelle | ⚠️ https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt |
|---|
| Benutzer | Anonymous User |
|---|
| Einreichung | 09.09.2025 20:57 (vor 8 Monaten) |
|---|
| Moderieren | 25.09.2025 07:44 (15 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 325811 [Topaz SERVCore Teller 2.14.0-RC2/2.14.1 Installer SERVCoreTeller_2.0.40D.msi erweiterte Rechte] |
|---|
| Punkte | 19 |
|---|