High severity7.8NVD Advisory· Published Jan 22, 2025· Updated Apr 15, 2026

CVE-2024-55957

Description

In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems.

Affected products

Thermo Fisher Scientific/Xcaliburllm-create
Range: <4.7 SP1
Thermo Fisher Scientific/Foundation Instrument Control Software (ICSW)llm-create
Range: <3.1 SP10

Patches

Vulnerability mechanics

References

assets.thermofisher.com/TFS-Assets/CORP/Product-Guides/Thermo_Scientific_Xcalibur_and_Foundation.pdfnvd
thermofisher.comnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000