| Título | Mechrevo Control Center GX V2 5.56.51.48 Insecure .reg File Handler |
|---|
| Descrição | The Mechvero GX V2 Control Center installer is a signed and trusted binary that uses .reg files during installation for configuration. However, it does not validate the integrity or authenticity of these .reg files.
Since the installer runs with high integrity privileges, an attacker with write access can tamper with the .reg file to inject malicious registry entries or commands. This can lead to privilege escalation, persistent backdoors, or arbitrary code execution via the Windows Registry under NT AUTHORITY\SYSTEM.
Download Link:
https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip |
|---|
| Fonte | ⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX |
|---|
| Utilizador | pipapupa (UID 87588) |
|---|
| Submissão | 29/07/2025 18h57 (há 9 meses) |
|---|
| Moderação | 13/08/2025 20h51 (15 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 320029 [Mechrevo Control Center GX V2 5.56.51.48 reg File Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|