| Title | Topaz SERVCore® Teller Installer V2.14.0-RC2 [2.14.1] Local Privilege Escalation |
|---|
| Description | A local privilege escalation vulnerability was identified in the installation routine of SERVCore® Teller version V2.14.0-RC2 [2.14.1]. The issue is caused by improper permission handling of the service binary installation directory, allowing unprivileged users to replace the service binary with a malicious executable, which is then executed with SYSTEM privileges upon reboot. |
|---|
| Source | ⚠️ https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt |
|---|
| User | Anonymous User |
|---|
| Submission | 09/09/2025 20:57 (11 months ago) |
|---|
| Moderation | 09/25/2025 07:44 (15 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 325811 [Topaz SERVCore Teller 2.14.0-RC2/2.14.1 Installer SERVCoreTeller_2.0.40D.msi permission] |
|---|
| Points | 19 |
|---|