| 标题 | Mechrevo Control Center GX V2 5.56.51.48 Elevation Of Privilege |
|---|
| 描述 | The Mechvero GX V2 Control Center stores PowerShell command scripts in the directory:
"C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command"
These scripts can be modified by local users, and the Control Center(signed binary) does not verify their integrity prior to execution. Upon launch, the Control Center executes these scripts with high integrity privileges, running as NT AUTHORITY\SYSTEM. This allows local privilege escalation by tampering with the PowerShell files to execute arbitrary code as SYSTEM.
Download Link:
https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip |
|---|
| 来源 | ⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX |
|---|
| 用户 | pipapupa (UID 87588) |
|---|
| 提交 | 2025-07-29 18時49分 (10 月前) |
|---|
| 管理 | 2025-08-13 23時47分 (15 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 320067 [Mechrevo Control Center GX V2 5.56.51.48 Powershell Script Command 权限提升] |
|---|
| 积分 | 20 |
|---|