Submeter #563468: MECHREVO Control Console 1.0.2.70 Elevation Of Privilegeinformação

TítuloMECHREVO Control Console 1.0.2.70 Elevation Of Privilege
DescriçãoThe Mechanical Revolution Console service will load a non-existent DLL from the current directory with permission 'system', and it will start automatically. When GCUService. exe is run, it will search for csCAPI.dll in the current directory and load it onto the stack to run. However, cscapi.dll is not in the default GCUService. exe directory. You can place malicious csCAPi.dll in the GCUService. exe directory and exploit this vulnerability for privilege escalation.
Fonte⚠️ https://www.yuque.com/ba1ma0-an29k/nnxoap/bhd5ckqugggmpttp?singleDoc# 《MECHREVO Control Console Has Privilege Escalation Vulnerability》
Utilizador
 Ba1_Ma0 (UID 60252)
Submissão22/04/2025 06h15 (há 12 meses)
Moderação04/05/2025 20h28 (13 days later)
EstadoAceite
Entrada VulDB307376 [Mechrevo Control Console 1.0.2.70 GCUService csCAPI.dll Elevação de Privilégios]
Pontos20

Do you need the next level of professionalism?

Upgrade your account now!