The vulnerability in Enter Software Iperius Backup (up to version 8.7.3) involves the creation of a temporary file with insecure permissions within the Backup Service component, specifically in the Jobs directory under C:\ProgramData\IperiusBackup\. This flaw allows a local attacker with limited privileges to potentially manipulate the temporary file due to improper permission settings. The attack complexity is high, and no user interaction is required. The vendor responded promptly and released a fixed version 8.7.4 to remediate the issue.

An attacker with local access and limited privileges could exploit this vulnerability to manipulate temporary files created by the backup service, potentially leading to unauthorized file access or modification. The CVSS 4.0 base score is 7.3 (high severity), reflecting the difficulty of exploitation and the limited attack vector (local access only). No remote exploitation or user interaction is required, but the impact is constrained by the need for local access and high complexity.

Upgrade Iperius Backup to version 8.7.4 or later, as this version contains an official fix for the vulnerability. Since this is not a cloud service, remediation depends on applying the vendor's patch. No additional mitigation steps are indicated by the vendor advisory.