Fsas Technologies ServerView Agents for Windows Privilege Chaining Vulnerability

A privilege chaining vulnerability has been identified in ServerView Agents for Windows, all versions through 11.60.04. This vulnerability allows a local authenticated attacker to escalate privileges and obtain SYSTEM rights on the affected server.

Impact

Exploitation of this vulnerability allows local authenticated users to gain SYSTEM privileges, potentially leading to unauthorized access or control over the server.

Remediation

Users are advised to update ServerView Agents for Windows to version 11.70.06 or later. Until the update can be applied, deactivate the 'Fujitsu Diagnostic Testhandler' and 'ServerView Remote Connector' services. Note that disabling the 'ServerView Remote Connector' service will affect certain functionalities, such as System Monitor operations and integration with ServerView Operations Manager.