CVE-2023-7270

Local Privilege Escalation via MSI installer

Medium · published June 27, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 2021 is also affected, but won't be fixed.

The SoftMaker Office and FreeOffice MSI installer files were found to

produce a visible conhost.exe window running as the SYSTEM user when

using the repair function of msiexec.exe. This allows a local,

low-privileged attacker to use a chain of actions, to open a fully

functional cmd.exe with the privileges of the SYSTEM user.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.1th percentile
Published
2024-06-27T09:28Z
EPSS history
Timeline
  • 27 JUN 09:28Z
    Local Privilege Escalation via MSI installer
    cvelistv5