India Goods And Services Tax Network Offline Utility Tool
Approved changes feed: RSS · Atom
cpe:2.3:a:gstn:india_goods_and_services_tax_network_offline_utility_tool:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gstn (1fdb079a-d3c8-56d9-8b58-31dcfc56af8f) |
|---|---|
| Product | India Goods And Services Tax Network Offline Utility Tool (f2d30444-89a9-5359-b959-6480565e40e2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-13779 |
vulnerable | 2026-06-08 05:08:48.860948 |
Details available
GSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript code. For example, a local user could create VBScript code for a TCP reverse shell, and use that later for Remote Command Execution.
Published: 2017-09-14T06:00:00.000Z
Updated: 2024-08-05T19:05:20.353Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.