Authenticated global-administrator escalation via undisclosed console flaws

Privilege escalation in Ercom Cryptobox before 4.40.x allows remote authenticated users to elevate an entity administrator to global administrator. Ercom has not disclosed the affected administration-console request or field, the mishandled input, or how the two published weakness classes cause escalation. Exploitation requires multiple entities with dedicated administrators and valid entity-administrator access; global platform administration is the bounded consequence.