CVE-2017-7977: Unicon-Software Elux

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The Screensavercc component in eLux RP before 5.5.0 allows attackers to bypass intended configuration restrictions and execute arbitrary commands with root privileges by inserting commands in a local configuration dialog in the control panel.

Affected products

• Unicon-Software Elux: before 5.5.0 (fixed in 5.5.0)

Published 2017-07-19. Last modified 2026-06-17.