CVE-2023-7270
Local Privilege Escalation via MSI installer
MEDIUM 5.3EPSS 0.3%
An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 2021 is also affected, but won't be fixed.The SoftMaker Office and FreeOffice MSI installer files were found to produce a visible conhost.exe window running as the SYSTEM user when using the repair function of msiexec.exe. This allows a local, low-privileged attacker to use a chain of actions, to open a fully functional cmd.exe with the privileges of the SYSTEM user.
- Affected
- SoftMaker Software GmbH · Office · FreeOffice
- CVSS v3.1 CNA
- 5.3 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - EPSS
- 0.32% chance of exploitation in the next 30 days, 24th percentile
- Published
- 2024-06-27
- Updated
- 2025-02-13