CVE-2017-7977
CRITICALeLux RP < 5.5.0 - Command Injection via Screensavercc Configuration Dialog
Title source: llmDescription
The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-7977
Scores
CVSS v3
9.8
EPSS
0.0236
EPSS Percentile
81.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-77
Status
published
Products (1)
unicon-software/elux
< 5.5.0
Published
Jul 19, 2017
Tracked Since
Feb 18, 2026