| عنوان | MECHREVO Control Console 1.0.2.70 Elevation Of Privilege |
|---|
| الوصف | The Mechanical Revolution Console service will load a non-existent DLL from the current directory with permission 'system', and it will start automatically. When GCUService. exe is run, it will search for csCAPI.dll in the current directory and load it onto the stack to run. However, cscapi.dll is not in the default GCUService. exe directory. You can place malicious csCAPi.dll in the GCUService. exe directory and exploit this vulnerability for privilege escalation. |
|---|
| المصدر | ⚠️ https://www.yuque.com/ba1ma0-an29k/nnxoap/bhd5ckqugggmpttp?singleDoc# 《MECHREVO Control Console Has Privilege Escalation Vulnerability》 |
|---|
| المستخدم | Ba1_Ma0 (UID 60252) |
|---|
| ارسال | 22/04/2025 06:15 AM (1 سنة منذ) |
|---|
| الاعتدال | 04/05/2025 08:28 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 307376 [Mechrevo Control Console 1.0.2.70 GCUService csCAPI.dll تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|