VULNERABILITY INTELLIGENCE
CVE-2014-9141
CVSS score7.2 HIGH
EPSS probability1.21%
CISA KEVNot currently listed
Published2014-12-03
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.