CVE-2017-5996

moderate-risk

Published 2017-10-26

The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.

Do I need to act?

0.14% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (8)

Remote Support

Affected Vendors

Beyondtrust

References (4)

Issue Tracking http://www.securitytracker.com/id/1039679

Issue Tracking https://www.vsecurity.com/download/advisories/20171026-1.txt

Issue Tracking http://www.securitytracker.com/id/1039679

Issue Tracking https://www.vsecurity.com/download/advisories/20171026-1.txt

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 1/34 · Minimal

Exposure 14/34 · Moderate