| Название | Topaz SERVCore® Teller Installer V2.14.0-RC2 [2.14.1] Local Privilege Escalation |
|---|
| Описание | A local privilege escalation vulnerability was identified in the installation routine of SERVCore® Teller version V2.14.0-RC2 [2.14.1]. The issue is caused by improper permission handling of the service binary installation directory, allowing unprivileged users to replace the service binary with a malicious executable, which is then executed with SYSTEM privileges upon reboot. |
|---|
| Источник | ⚠️ https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt |
|---|
| Пользователь | Anonymous User |
|---|
| Представление | 09.09.2025 20:57 (8 месяцы назад) |
|---|
| Модерация | 25.09.2025 07:44 (15 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 325811 [Topaz SERVCore Teller 2.14.0-RC2/2.14.1 Installer SERVCoreTeller_2.0.40D.msi эскалация привилегий] |
|---|
| Баллы | 19 |
|---|