| 标题 | Mechrevo Control Center GX V2 5.56.51.48 Insecure .reg File Handler |
|---|
| 描述 | The Mechvero GX V2 Control Center installer is a signed and trusted binary that uses .reg files during installation for configuration. However, it does not validate the integrity or authenticity of these .reg files.
Since the installer runs with high integrity privileges, an attacker with write access can tamper with the .reg file to inject malicious registry entries or commands. This can lead to privilege escalation, persistent backdoors, or arbitrary code execution via the Windows Registry under NT AUTHORITY\SYSTEM.
Download Link:
https://driver.mechrevo.com/d.mechrevo.com/driver/MECHREVO2025/ControlCenter_5.56.51.48_Mechrevo_GX_V2.zip |
|---|
| 来源 | ⚠️ https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX |
|---|
| 用户 | pipapupa (UID 87588) |
|---|
| 提交 | 2025-07-29 18時57分 (9 月前) |
|---|
| 管理 | 2025-08-13 20時51分 (15 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 320029 [Mechrevo Control Center GX V2 5.56.51.48 reg File 权限提升] |
|---|
| 积分 | 20 |
|---|