CVE-2017-7977

Critical

Published: 19/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Screensavercc component in eLux RP before version 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.

Risk Assessment

Attackers can gain full system privileges, potentially leading to serious security breaches and data loss within the organization.

Recommendation

It is recommended to update eLux RP to version 5.5.0 or later to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.

Original NVD description (English source)

The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.