cbcvebase.
CVE-2008-7170
published 2009-09-08

CVE-2008-7170: GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands…

PriorityP264critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
9.95%
95.0th percentile
GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet.

Affected

1 ranges
VendorProductVersion rangeFixed in
gameserversgsc——

Detection & IOCsextracted from sources · hover to see the quote

commandNOTICE :KICK :↗
  • →GSC build 2067 and earlier trusts client-supplied privilege level; monitor for crafted packets containing admin commands (e.g., KICK) sent by non-admin clients ↗
  • →Detect privilege escalation attempts against GSC Client 1.00 build 2067 by inspecting network traffic for admin command packets originating from unprivileged sessions ↗
  • ·Vulnerability affects GSC build 2067 and earlier; other versions may also be affected per the advisory ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.