High severity7.8NVD Advisory· Published Sep 3, 2024· Updated Apr 15, 2026

CVE-2024-38456

Description

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vivavis/HIGH-LEITllm-create
Range: V05.08.01.03 and V04.25.00.00 to 4.25.01.01

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2024/Sep/0nvd
www.schutzwerk.com/blog/schutzwerk-sa-2024-001/nvd
www.vivavis.com/en/solution/scada-en/high-leit/nvd
www.vivavis.com/en/vivavis-high-leit-rce-vulnerability-cve-2024-38456/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000