CVE-2024-23847

May 31, 2024, 1:01 p.m.

Tags

vultures@jpcert.or.jp
2024-05-31
CVE-2024-23847

Product(s) Impacted

Unifier and Unifier Cast

  • 5.0 or later

Description

Incorrect default permissions issue exists in Unifier and Unifier Cast Version.5.0 or later, and the patch "20240527" not applied. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be modified or deleted.

Weaknesses

Date

Published: May 31, 2024, 6:15 a.m.

Last Modified: May 31, 2024, 1:01 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN17680667/
vultures@jpcert.or.jp
https://www.yrl.com/fwp_support/info/khvu7f00000000q7.html
vultures@jpcert.or.jp