| Título | Topaz SERVCore® Teller Installer V2.14.0-RC2 [2.14.1] Local Privilege Escalation |
|---|
| Descripción | A local privilege escalation vulnerability was identified in the installation routine of SERVCore® Teller version V2.14.0-RC2 [2.14.1]. The issue is caused by improper permission handling of the service binary installation directory, allowing unprivileged users to replace the service binary with a malicious executable, which is then executed with SYSTEM privileges upon reboot. |
|---|
| Fuente | ⚠️ https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt |
|---|
| Usuario | Anonymous User |
|---|
| Sumisión | 2025-09-09 20:57 (hace 8 meses) |
|---|
| Moderación | 2025-09-25 07:44 (15 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 325811 [Topaz SERVCore Teller 2.14.0-RC2/2.14.1 Installer SERVCoreTeller_2.0.40D.msi escalada de privilegios] |
|---|
| Puntos | 19 |
|---|