Description

IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution (RCE) and local privilege escalation (LPE). The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the context of NT AUTHORITY\SYSTEM. This allows for a low privileged attacker to move laterally to affected systems and to escalate their privileges. IBM X-Force ID: 281619.

INFO

Published Date :

2024-04-06T11:51:45.548Z

Last Modified :

2024-08-01T23:36:21.296Z

Source :

ibm
AFFECTED PRODUCTS

The following products are affected by CVE-2024-25029 vulnerability.

Vendors Products
Ibm
  • Personal Communications
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-25029.

URL Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/281619 cve-icon cve-icon cve-icon
https://www.ibm.com/support/pages/node/7147672 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact