vulnwire
6.3med

CVE-2017-14124

In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
6.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 12%
Public exploits
0
none known

In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.

Exploit prediction (EPSS)

0.22% probability of exploitation in the next 30 days, higher than 12% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.06.3CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD2.03.3AV:L/AC:M/Au:N/C:P/I:P/A:N

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

  • myelux.com /cvesingle.htm?cve_id=CVE-2017-14124 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.