CVE-2017-7884: High severity apc ups daemon vulnerability
In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7884?
CVE-2017-7884 is considered a high severity vulnerability due to its potential for local authentication and execution of arbitrary code with elevated privileges.
How do I fix CVE-2017-7884?
To fix CVE-2017-7884, update APC UPS Daemon to a version later than 3.14.14.
Who is affected by CVE-2017-7884?
CVE-2017-7884 affects users of APC UPS Daemon version 3.14.14 and earlier who have installed the software with default settings.
What type of vulnerability is CVE-2017-7884?
CVE-2017-7884 is a local privilege escalation vulnerability allowing unauthorized access to the system.
What impact does CVE-2017-7884 have on systems?
CVE-2017-7884 allows an authenticated user to replace the service executable, potentially leading to system compromise.