إرسال #624900: Mechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilegeالمعلومات

عنوانMechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilege
الوصفThe Mechvero GX V2 Control Center stores PowerShell command scripts in the directory: "C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command" These scripts can be modified by local users, and the Control Center(signed binary) does not verify their integrity prior to execution. Upon launch, the Control Center executes these scripts with high integrity privileges, running as NT AUTHORITY\SYSTEM. This allows local privilege escalation by tampering with the PowerShell files to execute arbitrary code as SYSTEM. Download Link: https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip
المصدر⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
المستخدم
 pipapupa (UID 87588)
ارسال29/07/2025 06:49 PM (10 أشهر منذ)
الاعتدال13/08/2025 11:47 PM (15 days later)
الحالةتمت الموافقة
إدخال VulDB320067 [Mechrevo Control Center GX V2 5.56.51.48 Powershell Script Command تجاوز الصلاحيات]
النقاط20

Want to know what is going to be exploited?

We predict KEV entries!