CWE-269

CWE-269

  • Severity: HIGH
  • CVE: CWE-269
  • Affected Hardware: BLU-IC2, BLU-IC4
  • Firmware Version: 1.19.5
  • Mitigations: NO
  • Reported by: Kevin Schaller, Benjamin Lafois, Alexi Bitsios, Sebastian Toscano, Dominik Schneider
  • Active exploitation of vulnerability: NO
  • Description: privilege escalation through SUID-bit binary loaded with the custom application
  • Which versions patch releases are available for: 1.20