CVE-2017-14124

Estado: ModificadaMedia (6.3)—
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
CVSS

Versión: 3.0
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Puntuación base: 6.3
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.22%
Percentil entre todas las CVEs puntuadas: 11
Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Unicon-software — RP
CWE

CWE-269
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-14124",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.3,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-09-13T16:29:00.510",
  "references": [
    {
      "url": "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions."
    },
    {
      "lang": "es",
      "value": "En eLux RP en versiones 5.x anteriores a la 5.5.1000 LTSR y 5.6.x anteriores a la 5.6.2 CR, cuando se utiliza el modo escritorio clásico, es posible iniciar otras aplicaciones que no sean las definidas, incluso si el usuario no tiene los permisos para modificar las definiciones de aplicaciones."
    }
  ],
  "lastModified": "2026-06-17T01:05:38.650",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:*:*:*:*:ltsr:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6AF926B-30DE-4280-81A4-64885F7BDF5D",
              "versionEndIncluding": "5.5.0"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:*:*:*:*:cr:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8B113B7-59D7-4707-9D7B-2EF7B7FBA1AC",
              "versionEndIncluding": "5.6.0"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "926C7A24-FE41-44BB-9DDA-38563710BCC6"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "640B135D-A49F-405E-A239-9DE91A6C07E7"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "438409A8-E3BE-4DA1-A3B6-89124A27676B"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8AA6D28-CD35-4E4B-86AE-F21A36F2787A"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE7D03C9-38B8-44CF-8A9C-AD5AC9BF6546"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC2E61D0-2072-41C5-9BBD-73B6008DEEA4"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E155FE8B-BAA1-4B52-A420-E1ED73D583B4"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD616DF0-45A8-4FE5-BF69-48FD5B76BC3E"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC0B0A09-1B98-461B-A805-B91752E06185"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E889239-6B70-4BFE-BE9E-04BC2DC0EF3B"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D9C1A5D-6581-436D-A717-A95B5BCB8EB0"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8356BD02-F3A0-4592-A2FC-F866BE5C553B"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "749DC7C7-2CDE-4032-BDD8-605F4C5916F1"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:4.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18E54EAA-8D6A-4548-B01D-12B8829FF57D"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A343891-DE61-43F0-B7E1-A0E522BC5FC5"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "155C0F05-111F-4478-8CDA-922F9C6764BB"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95B9D8F5-22AE-45E8-AFE5-42A55191A945"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D76B159C-2288-41DB-8CE2-364DEFD7E043"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "237D50A8-93B1-448E-9E01-CE9AF42FDB49"
            },
            {
              "criteria": "cpe:2.3:a:unicon-software:rp:5.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F294F0E-86BC-4A0F-8341-2911915834F0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}