CVE-2014-4867

CVE-2014-4867 describes a local privilege escalation vulnerability affecting Cryoserver Security Appliance version 7.3.x. The flaw stems from weak permissions on the /etc/init.d/cryoserver script, allowing authenticated local users with support account access to execute /bin/cryo-mgmt and gain elevated privileges. With a CVSS score of 6.8, this vulnerability is rated as medium severity, indicating high impact on confidentiality, integrity, and availability once exploited locally with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.