CVE-2014-9141: Thomsonreuters Fixed Assets Cs

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.

Affected products

• Thomsonreuters Fixed Assets Cs: up to and including 13.1.4

Published 2014-12-03. Last modified 2026-06-17.