CVE-2017-7884

Name: CVE-2017-7884
Creator: NVD / NIST
Published: 2017-06-16T13:29:00.187+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.44%

Last modified Jun 17, 2026

CVE-2017-7884 is a vulnerability of currently unknown severity. In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.. EPSS estimates a 0.44% chance of exploitation in the next 30 days.

Description

In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.

Metrics

EPSS Probability

0.44%

34.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-427

Affected Software

Vendor	Product	Versions
Apcupsd	Apc Ups Daemon	<= 3.14.14

References

http://seclists.org/fulldisclosure/2017/Jun/20Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/99092Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038707
http://seclists.org/fulldisclosure/2017/Jun/20Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/99092Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038707

Timeline

Published: Jun 16, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-7884?

How severe is CVE-2017-7884?

Severity scoring for CVE-2017-7884 is pending analysis. The EPSS model estimates a 0.44% probability of exploitation in the next 30 days.

How do I fix CVE-2017-7884?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-7884?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST