Security Advisory

CVE-2024-38456

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-03 00:00:00
Last updated 2024-09-03 19:21:24
Assigner mitre
State PUBLISHED

Description

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITYSYSTEM.