CyberRota Analysis
AI-GeneratedThe vulnerability affects Telenia Software TVox versions 26.5.3 and earlier in the 26.x series, as well as 24.9.21 and earlier in the 24.x series, allowing attackers with access to the apache account to escalate privileges to root. By exploiting an insecure sudoers configuration that permits the apache user to execute /bin/nice without a password, attackers can run arbitrary commands with full root privileges. Organizations using these affected versions should prioritize remediation to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudoers configuration in /etc/sudoers.d/telenia. The configuration grants the apache user NOPASSWD execution of /bin/nice, which can be leveraged to invoke arbitrary commands, enabling full root-level command execution without supplying a password.