Visionline
Monthly
Privilege escalation in ASSA ABLOY Visionline on Windows (versions 1.0 through 1.32) stems from incorrect default file and directory permissions on critical resources, allowing a locally authenticated low-privileged user to manipulate system configuration or environment settings. The vulnerability combines CWE-250 (Execution with Unnecessary Privileges) with incorrect permission assignment, enabling an attacker with prior local access to elevate effective control over an access management system that governs physical room access in hospitality environments. No public exploit code has been identified and EPSS probability is near-zero (0.01%); however, the high integrity impact on the Visionline system is notable given its role in physical access control.
Privilege escalation in ASSA ABLOY Visionline on Windows (versions 1.0 through 1.32) stems from incorrect default file and directory permissions on critical resources, allowing a locally authenticated low-privileged user to manipulate system configuration or environment settings. The vulnerability combines CWE-250 (Execution with Unnecessary Privileges) with incorrect permission assignment, enabling an attacker with prior local access to elevate effective control over an access management system that governs physical room access in hospitality environments. No public exploit code has been identified and EPSS probability is near-zero (0.01%); however, the high integrity impact on the Visionline system is notable given its role in physical access control.