Local Privilege Escalation Vulnerability Affects Spectrum Power 7

CVE-2024-29119

What is CVE-2024-29119?

A vulnerability exists within Spectrum Power 7, affecting all versions prior to V24Q3, where several root-owned SUID binaries can be exploited by authenticated local attackers. This issue presents a significant risk as it may allow unauthorized escalation of privileges, enabling attackers to gain heightened access rights within the system. Organizations utilizing affected versions of Spectrum Power 7 should prioritize applying updates to mitigate potential exploitation of this critical vulnerability.

References