The ServerView Agents for Windows installer from Fsas Technologies Inc. fails to properly protect its dynamic library loading. During installation, the installer can resolve and load DLLs from insecure locations, allowing an attacker to supply a malicious library that executes with the full privileges of the installer process. This vulnerability can elevate the attacker’s capabilities, letting them run arbitrary code under an administrator account on the target system, posing a severe risk to confidentiality, integrity and availability of the environment.

Vendor: Fsas Technologies Inc. Product: ServerView Agents for Windows. No specific version information was supplied by the CNA, so all released versions of this product might be affected.

The CVSS score of 8.4 indicates a high severity issue. The EPSS score is < 1 %, suggesting that, at the time of analysis, exploitation likelihood is low, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to execute the installer with administrative rights; the attack vector is local installation, though a malicious installer could be distributed via social engineering or compromised networks. Based on the description, it is inferred that the attacker must have local access to run the installer. Once the installer runs, the insecure DLL search path allows the attacker to run arbitrary code with elevated privileges.