Vulnerabilities > Ehang IO > NPS > 0.15.0

DATE CVE VULNERABILITY TITLE RISK
2019-08-16 CVE-2019-15119 Incorrect Permission Assignment for Critical Resource vulnerability in Ehang-Io NPS
lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.
local
low complexity
ehang-io CWE-732
5.5