CVE-2014-9113

CVE-2014-9113 describes a local privilege escalation vulnerability affecting CCH Wolters Kluwer ProSystem fx Engagement versions 7.1 and earlier. The flaw stems from weak permissions on several service files, allowing authenticated local users to replace legitimate files with malicious ones. This vulnerability carries a CVSS score of 7.2, indicating high severity, as it permits an attacker to gain LocalSystem privileges with low attack complexity. While not listed on CISA's KEV catalog, a public exploit (EDB-35395) exists, though there is minimal community discussion or media coverage surrounding this CVE.