CVEvulnerability
CVE-2017-14124
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-269
Description
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
Affected configurations
• unicon-software rp (<= 5.5.0)
• unicon-software rp (<= 5.6.0)
• unicon-software rp 4.0.1
• unicon-software rp 4.2
• unicon-software rp 4.4.0
• unicon-software rp 4.5.0
• unicon-software rp 4.6.0
• unicon-software rp 4.7.0
• unicon-software rp 4.7.1
• unicon-software rp 4.8.0
• unicon-software rp 4.9.0
• unicon-software rp 4.10.0
• unicon-software rp 4.11.0
• unicon-software rp 4.11.1
• unicon-software rp 4.11.3
• unicon-software rp 4.11.5
• unicon-software rp 5.0.0
• unicon-software rp 5.1.0
• unicon-software rp 5.2.0
• unicon-software rp 5.3.0
• unicon-software rp 5.4.0
• unicon-software rp 5.4.1
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124 Vendor Advisory
- https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124 Vendor Advisory