CWE Code: 427
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Uncontrolled Search Path Element
Summary: in adam kropelin adk0212 apc ups daemon through 3.14.14, the default installation of apcupsd allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with system privileges at startup. this occurs because of "rw nt authority\authenticated users" permissions for %systemdrive%\apcupsd\bin\apcupsd.exe.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-06-16
Last Modified Date: 2019-10-03