CVE-2024-38456

Related Files

Vivavis HIGH-LEIT 4 / 5 Privilege Escalation

Posted Sep 3, 2024

Authored by Lukas Krieg | Site schutzwerk.com

Vivavis HIGH-LEIT versions 4 and 5 allow attackers to execute arbitrary code as local system on systems where the "HL-InstallService-hlxw" or "HL-InstallService-hlnt" Windows service is running. Authentication is necessary for successful exploitation. The execution of the exploit is trivial and might affect other systems if the applications folder is shared between multiple systems in which case the vulnerability can be used for lateral movement.

tags | advisory, arbitrary, local

systems | windows

advisories | CVE-2024-38456

SHA-256 | 71cbb32e8ea719c5b85e740cf97e165e4dd92083376eab16d2fff22074ac5216

Download | Favorite | View