Impact
Thermo Fisher Scientific Torrent Suite Dx software up to version 5.14.2 contains a flaw that allows an authenticated user with limited privileges to gain administrator‑level access by exploiting specific system interfaces. This defect undermines the confidentiality and integrity of the system, as the attacker can fully control the application and potentially access protected data.
Affected Systems
The affected product is Thermo Fisher Scientific Torrent Suite Dx, version 5.14.2 or earlier. No other vendors or products are listed as affected.
Risk and Exploitability
Because the vulnerability allows privileged escalation, it poses a serious risk to systems where users are authenticated. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no current widespread exploitation. Nonetheless, the potential for an attacker with legitimate credentials to gain full administrative control means the risk is high and requires immediate attention. The CVSS score of 8.8 indicates a high severity.
OpenCVE Enrichment