Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9141. PoCs published by Information Paradox.
AI-analyzed exploit summary This is a writeup describing a local privilege escalation vulnerability in Thomson Reuters Fixed Assets CS <=13.1.4. The vulnerability allows authenticated users to modify or replace an executable that runs at system startup, potentially escalating privileges to the highest privileged user level.
Description
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
Exploits (1)
This is a writeup describing a local privilege escalation vulnerability in Thomson Reuters Fixed Assets CS <=13.1.4. The vulnerability allows authenticated users to modify or replace an executable that runs at system startup, potentially escalating privileges to the highest privileged user level.