CVE-2017-7884
APC UPS Daemon 3.14.14 Privilege Escalation
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.
En Demonio APC UPS hasta versión 3.14.14 de Adam Kropelin adk0212 , la instalación por defecto de APCUPSD permite que un usuario identificado local, pero no privilegiado, ejecute código arbitrario con privilegios elevados al reemplazar el servicio ejecutable apcupsd.exe con un ejecutable malicioso que se ejecutará con privilegios SYSTEM en el inicio. Esto ocurre debido a los permisos "RW NT AUTHORITY\Authenticated Users" para %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.
APC UPS Daemon versions 3.14.14 and below suffer from a privilege escalation vulnerability.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-04-16 CVE Reserved
- 2017-06-16 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://seclists.org/fulldisclosure/2017/Jun/20 | Mailing List | |
http://www.securityfocus.com/bid/99092 | Third Party Advisory | |
http://www.securitytracker.com/id/1038707 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Apcupsd Search vendor "Apcupsd" | Apc Ups Daemon Search vendor "Apcupsd" for product "Apc Ups Daemon" | <= 3.14.14 Search vendor "Apcupsd" for product "Apc Ups Daemon" and version " <= 3.14.14" | - |
Affected
|