An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed.
| Software | From | Fixed in |
|---|---|---|
| win911 / win-911 | 4.20.13 | 4.20.13.x |