ILM Informatique OpenConcerto contains a flaw in which critical resources are assigned incorrect permissions, allowing an attacker to replace binaries within the application. This weakness can lead to the execution of malicious code or further compromise of system integrity, as essential executable files can be overwritten without proper authorization. The vulnerability is classified as a permissions issue (CWE-732).

Vendors and products affected are ILM Informatique OpenConcerto, specifically version 1.7.5. No other products or versions are listed as impacted.

The CVSS score of 2.4 suggests a low overall severity; exploitation would likely require local access or a user with sufficient privileges to write to protected directories. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, indicating that no known widespread exploitation has been reported. The missing explicit attack vector in the description leads to the inference that a privileged user or a process with elevated rights could trigger the binary replacement. Given the low severity and the lack of exploitation data, the risk is considered moderate but still actionable.