Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incorrect default permissions in Biamp Evoko Home
Vulnerability Description
Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the ‘Everyone’ group (i.e. any user who has local access to the operating system regardless of their privileges).
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
缺省权限不正确
Vulnerability Title
Biamp Evoko Home 安全漏洞
Vulnerability Description
Biamp Evoko Home是Biamp公司的一个会议室和办公桌预订系统。 Biamp Evoko Home存在安全漏洞，该漏洞源于非管理员用户可以利用弱文件和文件夹权限来提升权限、执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A