CyberRota Analysis
AI-GeneratedPupsman versions prior to 3.9.0 have incorrect default permissions that allow an attacker to place a malicious executable in the installation folder, leading to arbitrary code execution with SYSTEM privileges. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential system compromise. Immediate action is essential for those managing systems with Pupsman to protect against exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege