Vulnerability in Thomsonreuters Fixed Assets Cs
CVE-2014-9141
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
EPSS: 0.012 (65.2th percentile) — read the EPSS interpretation.
Affected products
- Thomsonreuters Fixed_assets_cs
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_MISC)