CVE-2024-14012: falha de alta gravidade em Revenera InstallShield
Potential Privilege Escalation in Revenera InstallShield 2023 R1
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.1%
Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a renamed Setup.exe, the MPR.dll may get loaded from an insecure location and can result in a privilege escalation. The issue has been fixed in versions 2023 R2 and later.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Revenera · InstallShieldCVEs relacionadas — Revenera InstallShield
No mesmo produto, das mais perigosas para as menos.
CVE-2023-29080HIGHPrivilege escalation in InstallShieldEPSS 0.2%CVE-2025-12418MEDIUMPotential Denial of Service in Supported Versions of Revenera InstallShieldEPSS 0.2%CVE-2024-7562HIGHCVE-2024-7562EPSS 0.1%CVE-2023-29081MEDIUMInstallShield Symlink Vulnerability Affecting Suite Project SetupsEPSS 0.1%