| Title | Mechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilege |
|---|
| Description | The Mechvero GX V2 Control Center stores PowerShell command scripts in the directory:
"C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command"
These scripts can be modified by local users, and the Control Center(signed binary) does not verify their integrity prior to execution. Upon launch, the Control Center executes these scripts with high integrity privileges, running as NT AUTHORITY\SYSTEM. This allows local privilege escalation by tampering with the PowerShell files to execute arbitrary code as SYSTEM.
Download Link:
https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip |
|---|
| Source | ⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX |
|---|
| User | pipapupa (UID 87588) |
|---|
| Submission | 07/29/2025 18:49 (12 months ago) |
|---|
| Moderation | 08/13/2025 23:47 (15 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 320067 [Mechrevo Control Center GX V2 5.56.51.48 Powershell Script Command uncontrolled search path] |
|---|
| Points | 20 |
|---|