CVE-2023-38817

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component

published October 11, 2023

CVSS
—
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by Microsoft itself."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.4th percentile
Published
2023-10-11T00:00Z
EPSS history
Timeline
  • 11 OCT 00:00Z
    An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component
    cvelistv5