Unscored CVE-2023-29838 EUVD-2023-33375GHSA-cpqc-m5vg-2rph

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the…

Published May 22, 2023 · Updated Jan 21, 2025 · Assigned by mitre

Description

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file.

References

https://github.com/IthacaLabs/Botkind/tree/main/Botkind_SyncApp
https://github.com/IthacaLabs/Botkind/blob/main/Botkind_SyncApp/WeakServicePermissions_InsecureServiceExecutable_CVE-2023-29838.txt