Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-4229

Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allo

Description

Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than a folder that only users with administrative privilege have permission to modify.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Edgecross Consortium Edgecross Basic Software for Windows

Default version status: unaffected

  • versions 1.00 and lateraffected

Edgecross Consortium Edgecross Basic Software for Developers

Default version status: unaffected

  • versions 1.00 and lateraffected

References