High · 7.8 CVE-2023-6080 EUVD-2023-58336GHSA-75pc-2p8w-2hhf

Privilege Escalation to SYSTEM in Lakeside Software Installer

Published Oct 18, 2024 · Updated Apr 1, 2026 · Assigned by Mandiant

Vendor: Lakeside Software Product: SysTrack LsiAgent Installer

Description

Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access.

Affected products

Vendor	Product	Affected	Fixed
Lakeside Software	SysTrack LsiAgent Installer	10.7.8 – < 11.0	11.0

References

https://www.lakesidesoftware.com/
https://www.cve.org/CVERecord?id=CVE-2023-6080
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0009.md