CVE-2018-17775 Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
HighCVSS 7.8
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seqrite end point security | = 7.4 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 45568 exploit third-party-advisory vdb-entry