CVE-2024-0770
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD
Description
A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file iuclid6.exe of the component Desktop Installer. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. VDB-251670 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected (1)
Products: Echa.europa: Iuclid
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.10.3 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows | All versions |
References (6)
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredThird Party Advisory
Timeline
No history available yet.