Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ScriptLogic任意注册表修改漏洞
Vulnerability Description
ScriptLogic 4.01版本和其他4.14之前版本可能处理提升权限的客户端请求。远程攻击者可以(1)借助任意注册表ScriptLogic RPC服务(SLRPC)修改任意注册表项或(2)借助RunAdmin服务(SLRAserver.exe和SLRAclient.exe)修改任意配置。
CVSS Information
N/A
Vulnerability Type
N/A