CVE-2017-5996

The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
VendorProductVersion
beyondtrustremote_support
15.2.1
beyondtrustremote_support
15.2.2
beyondtrustremote_support
16.1.1
beyondtrustremote_support
16.1.2
beyondtrustremote_support
16.1.3
beyondtrustremote_support
16.1.4
beyondtrustremote_support
16.2.1
beyondtrustremote_support
16.2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1039679
https://www.vsecurity.com/download/advisories/20171026-1.txt
http://www.securitytracker.com/id/1039679
https://www.vsecurity.com/download/advisories/20171026-1.txt