| タイトル | Mechrevo Control Center GX V2 5.56.51.48 Insecure .reg File Handler |
|---|
| 説明 | The Mechvero GX V2 Control Center installer is a signed and trusted binary that uses .reg files during installation for configuration. However, it does not validate the integrity or authenticity of these .reg files.
Since the installer runs with high integrity privileges, an attacker with write access can tamper with the .reg file to inject malicious registry entries or commands. This can lead to privilege escalation, persistent backdoors, or arbitrary code execution via the Windows Registry under NT AUTHORITY\SYSTEM.
Download Link:
https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip |
|---|
| ソース | ⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX |
|---|
| ユーザー | pipapupa (UID 87588) |
|---|
| 送信 | 2025年07月29日 18:57 (9 月 ago) |
|---|
| モデレーション | 2025年08月13日 20:51 (15 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 320029 [Mechrevo Control Center GX V2 5.56.51.48 reg File 特権昇格] |
|---|
| ポイント | 20 |
|---|