Voltronic Power ViewPower Local Privilege Escalation Vulnerability
CVE-2023-51579

7.8HIGH

Key Information:

Status
Vendor
CVE Published:
3 May 2024

What is CVE-2023-51579?

The Voltronic Power ViewPower software contains a vulnerability that stems from improper permission settings in its installer. This flaw allows local attackers who have already executed low-privileged code on a system to escalate their privileges. By exploiting this weakness, attackers can gain unauthorized access to execute arbitrary code with SYSTEM privileges, thus compromising the security of the affected installations.

Affected Version(s)

ViewPower 1.04.21353

References

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.