Thermo Fisher Scientific Xcalibur and Foundation Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Thermo Fisher Scientific Xcalibur versions prior to 4.7 SP1 and in Thermo Foundation Instrument Control Software (ICSW) versions prior to 3.1 SP10. This vulnerability arises from improper access control permissions on Windows systems, allowing unauthorized users to escalate privileges.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling a user to gain elevated rights or access within the operating system.

Remediation

Users can upgrade to Thermo Scientific Foundation software version 3.1 SP10 or Thermo Scientific Xcalibur software version 4.7 SP1. Instructions for downloading these updates are available on the Thermo Scientific Life Sciences Mass Spectrometry Software Download and Licensing Portal.