漏洞标题
Voltronic Power ViewPower错误权限分配本地权限提升漏洞
漏洞描述信息
Voltronic Power ViewPower错误权限分配本地权限提升漏洞。此漏洞允许本地攻击者在受影響的Voltronic Power ViewPower安裝中提升权限。
攻击者必须首先获得在目标系统上执行低权限代码的能力，才能利用此漏洞。
具体的漏洞存在于产品安装程序中。问题在于文件夹的权限设置不正确。攻击者可以利用此漏洞提升权限并在SYSTEM上下文中执行任意代码。该漏洞被标记为ZDI-CAN-22025。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
关键资源的不正确权限授予
漏洞标题
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability
漏洞描述信息
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22025.
CVSS信息
N/A
漏洞类别
关键资源的不正确权限授予
漏洞标题
Voltronic Power ViewPower 安全漏洞
漏洞描述信息
Voltronic Power ViewPower是Voltronic Power公司的一款适用于太阳能逆变器的监控和管理软件。 Voltronic Power ViewPower 存在安全漏洞，该漏洞源于产品安装程序中存在特定缺陷，允许攻击者提升权限。
CVSS信息
N/A
漏洞类别
其他