INFINITT System Manager local privilege escalation via world-writable command manifest
Anyone on the PC could take administrator control through a hospital imaging program.
Summary
SmartUpdate.exe and SmartExecute.exe in INFINITT PACS run commands listed in a world-writable execlist.txt during updates. A local attacker with low privileges can change that file to execute arbitrary commands with administrator privileges; versions 3.0.11.3 through 3.0.11.5 are affected.
Affected when
- Local account with low privileges
- World-writable execlist.txt file
- INFINITT System Manager 3.0.11.3 through 3.0.11.5
What to do
No fixed version is named in the sources. Check that the installed version is newer than 3.0.11.5, and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen