{"id":"CVE-2024-7562","state":"PUBLISHED","title":"A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported version","description":"A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue.","publishedAt":"2025-06-12T16:05:31.562Z","updatedAt":"2025-06-17T18:17:28.748Z","severity":{"score":7.3,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"flexera"},"assigner":"flexera","products":["Revenera InstallShield"],"affected":[{"vendor":"Revenera","product":"InstallShield","defaultStatus":"unaffected","versions":[{"version":"2023 R2","status":"affected","versionType":"custom"},{"version":"2022 R2","status":"affected","versionType":"custom"},{"version":"2021 R2","status":"affected","versionType":"custom"}]}],"references":["https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages"],"weaknesses":["CWE-379"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7562.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-7562","state":"PUBLISHED","datePublished":"2025-06-12T16:05:31.562Z","dateUpdated":"2025-06-17T18:17:28.748Z","assignerShortName":"flexera","assignerOrgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","dateReserved":"2024-08-06T14:57:11.091Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versions (InstallShield 2023 R2, InstallShield 2022 R2 and InstallShield 2021 R2) are affected by this issue."}],"affected":[{"vendor":"Revenera","product":"InstallShield","defaultStatus":"unaffected","versions":[{"version":"2023 R2","status":"affected","versionType":"custom"},{"version":"2022 R2","status":"affected","versionType":"custom"},{"version":"2021 R2","status":"affected","versionType":"custom"}]}],"references":[{"url":"https://community.revenera.com/s/article/cve-2024-7562-privilege-escalation-vulnerability-in-created-msi-packages"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"LOCAL","baseScore":7.3,"baseSeverity":"HIGH","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-379","description":"CWE-379","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"flexera","orgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","dateUpdated":"2025-06-12T16:05:31.562Z"},"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured.<br>"}],"value":"InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured."}],"credits":[{"lang":"en","type":"finder","value":"Sandro Poppi"}],"impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-12T17:12:01.279311Z","id":"CVE-2024-7562","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-17T18:17:28.748Z"}}]}}}