high7.8
CVE-2021-30490
upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to …
Impact
upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Power-Software-Download | Viewpower | from 1.04-21012 through 1.04-21353 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html
- https://www.power-software-download.com/viewpower.html
- https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html
- https://www.power-software-download.com/viewpower.html