Assetview Cloud
Monthly
Local privilege escalation in Hammock AssetView allows an authenticated low-privileged user with interactive logon to a Windows host running the Management Console or Client Terminal to gain SYSTEM privileges. The flaw stems from incorrect permission assignment on a critical resource (CWE-732) and is rated CVSS 8.5 (High) in CVSS 4.0, reflecting high confidentiality, integrity, and availability impact. No public exploit code or active exploitation has been identified at time of analysis, and exploitation requires the attacker to already have local interactive access to the specific component host, not arbitrary managed endpoints.
Local privilege escalation in Hammock AssetView allows an authenticated low-privileged user with interactive logon to a Windows host running the Management Console or Client Terminal to gain SYSTEM privileges. The flaw stems from incorrect permission assignment on a critical resource (CWE-732) and is rated CVSS 8.5 (High) in CVSS 4.0, reflecting high confidentiality, integrity, and availability impact. No public exploit code or active exploitation has been identified at time of analysis, and exploitation requires the attacker to already have local interactive access to the specific component host, not arbitrary managed endpoints.