CVE-2024-2658: Local privilege escalation in FlexNet Publisher

High severity · published Jan 30, 2025

CVE-2024-2658

Local privilege escalation in FlexNet Publisher

8.5

CVSS

0.8%

EPSS

On KEV

Description

A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted openssl.conf file leading to the execution of a malicious DLL (Dynamic-Link Library) with elevated privileges.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.8% · higher than 57% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FlexNet Publisher · Flexera

before 2024 R1 (11.19.6.0) · source: vendor

In the news

VulnerabilityHigh

Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk

Analysis of CVE-2024-2658 as found in Schneider Electric's Floating License Manager. Discover how this FlexNet Publisher vulnerability potentially allows attackers to escalate to NT AUTHORITY\SYSTEM privileges and expand their foothold; learn how to mitigate the risk.

CVE-2024-2658

Jun 26, 2026·SecureList (Kaspersky)

Affected product

FlexNet Publisher

Flexera

All FlexNet Publisher CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-2658

CVE.org

https://www.cve.org/CVERecord?id=CVE-2024-2658

community.flexera.com

https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issue

www.zerodayinitiative.com

https://www.zerodayinitiative.com/advisories/ZDI-24-359/