提出 #624900: Mechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilege情報

タイトルMechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilege
説明The Mechvero GX V2 Control Center stores PowerShell command scripts in the directory: "C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command" These scripts can be modified by local users, and the Control Center(signed binary) does not verify their integrity prior to execution. Upon launch, the Control Center executes these scripts with high integrity privileges, running as NT AUTHORITY\SYSTEM. This allows local privilege escalation by tampering with the PowerShell files to execute arbitrary code as SYSTEM. Download Link: https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip
ソース⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
ユーザー
 pipapupa (UID 87588)
送信2025年07月29日 18:49 (10 月 ago)
モデレーション2025年08月13日 23:47 (15 days later)
ステータス承諾済み
VulDBエントリ320067 [Mechrevo Control Center GX V2 5.56.51.48 Powershell Script Command 特権昇格]
ポイント20

Want to know what is going to be exploited?

We predict KEV entries!