ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.
Max CVSS
4.6
EPSS Score
0.04%
Published
2014-11-03
Updated
2017-09-08
1 vulnerabilities found