Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Apcupsd Subscribe
Filtered by product Apc Ups Daemon
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-7884 1 Apcupsd 1 Apc Ups Daemon 2019-10-02 7.2 HIGH 8.4 HIGH
In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.