CVE-2014-9113 in ProSystem fx Engagement信息

摘要

由 VulDB • 2026-07-09

CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 e versioni precedenti utilizzano permessi deboli (Utenti Autenticati: Modifica e Scrittura) per i file di servizio (1) Pfx.Engagement.WcfServices, (2) PFXEngDesktopService, (3) PFXSYNPFTService e (4) P2EWinService in PFX Engagement\, il che consente agli utenti locali di ottenere privilegi LocalSystem tramite un file Trojan horse.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-11-26

披露

2014-12-02

管理

已接受

条目

VDB-73054

CPE

准备好

CWE

CWE-264 (已确认)

利用

下载

CVSS

7.2 (NVD)

EPSS

0.01645

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-9113
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-9113
CVE Details	https://www.cvedetails.com/cve/CVE-2014-9113/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!