CVE Feed

    Dashboard / CVE / CVE-2023-27795

    CVE-2023-27795

    An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.

    Published:Oct 19, 2023
    Last Modified:Nov 21, 2024
    EPS:Oct 19, 2023
    EPSS Score:0.00036
    CVSS Score:7.8

    Affected Products

    Vendor
    Ixpdata
    Product
    Easyinstall

    Exploits

    https://www.bramfitt-tech-labs.com/article/easy-install-cve-issuehttps://www.bramfitt-tech-labs.com/article/easy-install-cve-issue

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2023-27791 (CVSS 8.1) — An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecur…
    CVE-2023-30132 (CVSS 7.8) — An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via stat…
    CVE-2023-30131 (CVSS 9.8) — An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated …
    CVE-2023-27793 (CVSS 7.8) — An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges…
    CVE-2023-27792 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of pe…
    CVE-2022-35120 (CVSS 8.8) — IXPdata EasyInstall 6.6.14725 contains an access control issue.…
    CVE-2019-19893 (CVSS 7.5) — In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unaut…
    CVE-2019-19894 (CVSS 5.5) — In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client…
    CVE-2019-19895 (CVSS 7.8) — In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a cli…
    CVE-2019-19896 (CVSS 9.9) — In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High