CVE-2024-47550

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-475529.8Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): from 2.0.0 CVE-2024-475539.9A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate u CVE-2024-475544.3Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively CVE-2024-475558.3Missing Authentication - User & System Configuration CVE-2024-475569.8Pre-Auth RCE via Path Traversal CVE-2024-475579.8Pre-Auth RCE via Path Traversal CVE-2024-475588.8Authenticated RCE via Path Traversal CVE-2024-475598.8Authenticated RCE via Path Traversal CVE-2024-47565.4The WP Backpack WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2024-475607.8RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended CVE-2024-475617.3Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommende CVE-2024-475628.8A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize