Incorrect file ownership of privileged service's libraries in Enel X JuiceBox

A vulnerability in Enel X JuiceBox allows unauthorized user accounts to access libraries that should be restricted to a privileged service. This can lead to unauthorized modification or misuse of critical service components.

CWE-708 (Incorrect Ownership Assignment) affects Enel X JuiceBox service libraries, where file ownership is incorrectly configured under certain conditions, allowing non-privileged accounts read or write access to sensitive service files. Exploitation requires local access and knowledge of the vulnerable library paths; impact includes potential privilege escalation or service compromise through library manipulation.