Alpine iLX-F511 method lets local attackers escalate privileges
Original title: ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
Attackers need low-privileged code first; ZDI rates the Pwn2Own zero-day CVSS 7.8.
ZDI-26-820 is a local privilege-escalation flaw in an exposed dangerous method of Fiv.System on Alpine iLX-F511. An attacker must already be able to run low-privileged code on the device. ZDI assigned CVSS 7.8 and labeled the issue a Pwn2Own zero-day. The snippet gives no fixed version.
Unconfirmed: The advisory does not state a fix or any exploitation outside Pwn2Own.
- The identifier is ZDI-26-820.
- The component named is Fiv.System.
- Low-privileged code execution is a prerequisite.
- ZDI's CVSS rating is 7.8.
Impact: Local privilege escalation after low-privileged code execution
| Product | Affected |
|---|---|
| Alpine iLX-F511 | — |
- Vendors
- Alpine
- Products
- iLX-F511
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.