CVE-2017-7977 The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local....
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unicon-software elux | < 5.5.0 | 5.5.0 |
References
- www.myelux.com vendor-advisory