CVE-2023-25438

HIGH

Genomedics Millegpg - Incorrect Permission Assignment

Title source: rule

Description

An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalated privileges via modifying specific files.

Exploits (1)

exploitdb WRITEUP

by Andrea Intilangelo · textlocalwindows

https://www.exploit-db.com/exploits/51410

View Code ZIP pw:eip

References (2)

[Vendor Advisory] https://millegpg.it/

[Third Party Advisory, VDB Entry] https://packetstormsecurity.com/files/172052/MilleGPG5-5.9.2-Local-Privilege-Escalation.html

Scores

CVSS v3 7.8

EPSS 0.0226

EPSS Percentile 84.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-732

Status published

Products (1)

genomedics/millegpg 5.9.2

Published May 04, 2023

Tracked Since Feb 18, 2026