Local Privilege Escalation in FlexNet Publisher by Flexera
CVE-2024-2658

8.5HIGH

Key Information:

Vendor

Flexera

Status
Flexnet Publisher
Vendor
CVE Published:
30 January 2025

Badges

đź‘ľ Exploit Existsđź“° News Worthy

What is CVE-2024-2658?

A misconfiguration in the lmadmin.exe component of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) enables an issue where the OpenSSL configuration file could be loaded from an incorrect directory. An attacker with low privileges can create the non-existent directory and deploy a malicious openssl.conf file. This malicious configuration can lead to the execution of arbitrary DLLs with elevated privileges, significantly compromising system integrity and security.

Affected Version(s)

FlexNet Publisher Windows 0 < 2024 R1 (11.19.6.0)

News Articles

favicon imageSecurelist

CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems

Analysis of CVE-2024-2658 as found in Schneider Electric’s Floating License Manager. Discover how this FlexNet Publisher vulnerability potentially allows attackers to escalate to NT AUTHORITY\SYSTEM privileges and expand their foothold; learn how to mitigate the risk.

References

https://community.flexera.com/s/article/cve-2024-2658-fle...
vendor-advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-359/
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • đź‘ľ

    Exploit known to exist

  • đź“°

    First article discovered by Securelist

  • Vulnerability published

  • Vulnerability Reserved

.