CVE-2013-5701
WatchGuard Server Center <= 11.7.4 - Untrusted Search Path Privilege Escalation via wgpr.dll
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-5701. PoCs published by Julien Ahrens.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in Watchguard Server Center by leveraging a DLL export function to execute arbitrary commands (e.g., 'calc') with SYSTEM privileges. The PoC demonstrates the vulnerability by launching a calculator via WinExec.
Description
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.
Exploits (1)
This exploit targets a local privilege escalation vulnerability in Watchguard Server Center by leveraging a DLL export function to execute arbitrary commands (e.g., 'calc') with SYSTEM privileges. The PoC demonstrates the vulnerability by launching a calculator via WinExec.