PT-2021-17836
CVE-2021-28269
·
Published
2021-04-27
·
Updated
2021-05-07
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Soyal Technology 701Client version 9.0.1
Description:
The issue concerns insecure permissions via the client.exe binary, where the Authenticated Users group has Full permissions.
Recommendations:
For Soyal Technology 701Client version 9.0.1, consider restricting the permissions of the Authenticated Users group on the client.exe binary to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾