CVE-2024-0770

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file iuclid6.exe of the component Desktop Installer. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. VDB-251670 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
European Chemicals Agency	IUCLID	7.10.3

References

https://imagebin.ca/v/7nx8zv3l62KfExploit
https://vuldb.com/?ctiid.251670Permissions Required, Third Party Advisory
https://vuldb.com/?id.251670Third Party Advisory
https://imagebin.ca/v/7nx8zv3l62KfExploit
https://vuldb.com/?ctiid.251670Permissions Required, Third Party Advisory
https://vuldb.com/?id.251670Third Party Advisory

Timeline

Published: Jan 21, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-07715.5A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unk CVE-2024-07725.5A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality CVE-2024-07735.4A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown f CVE-2024-07745.5A vulnerability was found in Any-Capture Any Sound Recorder 2.93. It has been declared as problematic. This vulnerability affects unknown co CVE-2024-07757.1A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause CVE-2024-07765.4A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms 2.0. Affected by this issue is some unknown funct CVE-2024-07789.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affe CVE-2024-07798.8The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function h CVE-2024-07808.8The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, a CVE-2024-07816.1A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of th CVE-2024-07826.1A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects CVE-2024-07839.8A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processi