ZDI-CAN-21224: ZDI-23-1730: Fuji Electric Tellus Lite Incorrect Default Permissions Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus Lite. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2023-5299.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21224?
ZDI-CAN-21224 has a medium severity rating due to its potential for local privilege escalation.
How do I fix ZDI-CAN-21224?
To mitigate ZDI-CAN-21224, ensure that your installations of Fuji Electric Tellus Lite are updated to the latest version provided by the vendor.
Who is affected by ZDI-CAN-21224?
ZDI-CAN-21224 affects installations of Fuji Electric Tellus Lite that are not patched against this vulnerability.
What type of attack does ZDI-CAN-21224 involve?
ZDI-CAN-21224 involves local attackers escalating privileges after executing low-privileged code on the target system.
What are the prerequisites for exploiting ZDI-CAN-21224?
An attacker must first have the ability to execute low-privileged code on the affected system to exploit ZDI-CAN-21224.