CVE-2017-9662 Privilege escalation in n/a
Local attackers can escalate privileges due to weak default directory access controls in Fuji Electric Monitouch V-SFT software.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-9662?
CVE-2017-9662 is a medium-severity vulnerability in n/a, published on 14 Aug 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges.
Weakness: CWE-269
Which versions are affected by CVE-2017-9662?
It affects 1 product.
Products include Fujielectric Monitouch V-Sft.
How do I fix CVE-2017-9662?
No fix has been published for CVE-2017-9662 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-9662 being exploited?
There is no known exploitation of CVE-2017-9662 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-9659 Memory corruption in n/a
- CVE-2017-9660 Memory corruption in n/a
- CVE-2024-5597 Fuji Electric Monitouch V-SFT Type Confusion
- CVE-2024-34171 Fuji Electric Monitouch V-SFT Stack-Based Buffer Overflow
- CVE-2024-5271 Fuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')
Sources
Also known as GHSA-p9fr-8rpj-73h9.