Genian Ssl Pns Watchcat Ui
Monthly
Improper privilege management in Genian SSL PNS (the Frodo-Core and Watchcat-UI components) lets an authenticated administrator who can run CSV bulk user registration escalate to super administrator and then force the creation of an operating-system-level account by manipulating the permission column of the uploaded CSV. The issue is classified as CWE-269 and scored 7.5 by the reporting CNA under CVSS 4.0 (AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L), which shows the attack is network-reachable but requires a pre-existing high-privileged account and a non-default attack precondition (AT:P) tied to deployments that actually expose the bulk-registration import workflow. No public exploit code has been identified at time of analysis and there is no evidence of active exploitation; the vendor has published an advisory (GHSA-8mjh-295r-5hf2) covering both affected components.
Genian SSL PNS (both the frodo-core and watchcat-ui components) performs insufficient file extension and integrity verification on files submitted through its patch/update upload feature, so an artifact that is not an official vendor patch can be accepted by the appliance. Exploitation requires a high-privileged local actor on the appliance plus a specific non-default precondition (CVSS:4.0 AV:L/AC:H/AT:P/PR:H/UI:N), and the resulting impact is limited to integrity (VI:L) with no confidentiality or availability effect, giving a base score of 1.8 - a low-priority, high-friction issue despite belonging to the usually severe CWE-434 unrestricted upload class. No confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; KR-CERT is credited with reporting the issue.
Improper privilege management in Genian SSL PNS (the Frodo-Core and Watchcat-UI components) lets an authenticated administrator who can run CSV bulk user registration escalate to super administrator and then force the creation of an operating-system-level account by manipulating the permission column of the uploaded CSV. The issue is classified as CWE-269 and scored 7.5 by the reporting CNA under CVSS 4.0 (AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L), which shows the attack is network-reachable but requires a pre-existing high-privileged account and a non-default attack precondition (AT:P) tied to deployments that actually expose the bulk-registration import workflow. No public exploit code has been identified at time of analysis and there is no evidence of active exploitation; the vendor has published an advisory (GHSA-8mjh-295r-5hf2) covering both affected components.
Genian SSL PNS (both the frodo-core and watchcat-ui components) performs insufficient file extension and integrity verification on files submitted through its patch/update upload feature, so an artifact that is not an official vendor patch can be accepted by the appliance. Exploitation requires a high-privileged local actor on the appliance plus a specific non-default precondition (CVSS:4.0 AV:L/AC:H/AT:P/PR:H/UI:N), and the resulting impact is limited to integrity (VI:L) with no confidentiality or availability effect, giving a base score of 1.8 - a low-priority, high-friction issue despite belonging to the usually severe CWE-434 unrestricted upload class. No confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; KR-CERT is credited with reporting the issue.