CVE-2017-20218highCWE-428

CVE-2017-20218: fallo de gravedad alta en Serviio PRO

Serviio PRO 1.8 Local Privilege Escalation via Unquoted Path

Publicada el · Actualizada el

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.1%
probabilidad de explotación
0.1%top 97% de las CVE
explotación observada
noninguna fuente lo reporta
Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing malicious executables in the system root path. Additionally, improper directory permissions with full access for the Users group allow authenticated users to replace the executable file with arbitrary binaries, enabling privilege escalation during service startup or system reboot.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Serviio · Serviio PRO
CVEs relacionadas — Serviio PRO

En el mismo producto, de las más peligrosas a las menos.

CVE-2017-20217HIGHServiio PRO 1.8 REST API Information DisclosureEPSS 0.7%CVE-2017-20220HIGHServiio PRO 1.8 Unauthenticated Password Change via REST APIEPSS 0.4%CVE-2017-20219MEDIUMServiio PRO 1.8 DOM-based Cross-Site Scripting via mediabrowserEPSS 0.2%
Referencias
https://blogs.securiteam.com/index.php/archives/3094https://cxsecurity.com/issue/WLB-2017050019https://exchange.xforce.ibmcloud.com/vulnerabilities/125644https://packetstormsecurity.com/files/142384https://www.exploit-db.com/exploits/41959/https://www.vulncheck.com/advisories/serviio-pro-local-privilege-escalation-via-unquoted-pathhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5405.php