Unscored severity · published Feb 16, 2015
CVE-2015-1496
Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Motorola Scanner Sdk · Motorola
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1496
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1496
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-035/
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-036/
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-037/
Vendor Advisory
https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=87666
More from Motorola Scanner Sdk
–
CVE-2015-1495
Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1) IOPOSScanner.ocx or…