CVE-2024-9950
HIGHForescout SecureConnector <11.3.07.0109 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-9950. PoCs published by 0Nightsedge0.
AI-analyzed exploit summary This PoC exploits a local privilege escalation vulnerability in Forescout SecureConnector by monitoring a temporary directory for newly created .bat files and replacing them with a malicious script. The exploit leverages a FileSystemWatcher to detect file creation events and hijacks the file by renaming the original and replacing it with a controlled script.
Description
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.
Exploits (1)
This PoC exploits a local privilege escalation vulnerability in Forescout SecureConnector by monitoring a temporary directory for newly created .bat files and replacing them with a malicious script. The exploit leverages a FileSystemWatcher to detect file creation events and hijacks the file by renaming the original and replacing it with a controlled script.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H