Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint via a low-privileged user account) can access the exposed RPC service of the update service component. This RPC functionality allows the attacker to interact with the RPC functionality and execute code from a path of his choice (local, or remote via SMB) because of a TOCTOU race condition. This code execution is in the context of the Plex update service (which runs as SYSTEM).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PLEX Plex Media Server 访问控制错误漏洞
Vulnerability Description
PLEX Plex Media Server是瑞士Plex（PLEX）公司的一套媒体播放器及媒体服务器软件。 Plex Media Server 中存在访问控制错误漏洞，该漏洞源于产品更新服务组件中的RPC服务未对用户身份进行有效验证。攻击者可通过该漏洞执行恶意代码。以下产品及版本受到影响：Plex Media Server 1.24.4.5081-e362dc1ee 版本。
CVSS Information
N/A
Vulnerability Type
N/A