Vulnerability Details CVE-2017-7622
dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege escalation, by calling DoWriteGrubSettings() provided by dde-daemon.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2017-7622
-
cpe:2.3:a:deepin:deepin_desktop_environment:15.0
-
cpe:2.3:a:deepin:deepin_desktop_environment:15.1
-
cpe:2.3:a:deepin:deepin_desktop_environment:15.2
-
cpe:2.3:a:deepin:deepin_desktop_environment:15.3