Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.21%
Published
Dec 2, 2014
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
Weaknesses (CWE)
Affected Products (1)
References (4)