CVE-2018-25359
HIGHSplinterware System Scheduler Pro 5.12 Privilege Escalation
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25359. PoCs published by bzyo.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Splinterware System Scheduler Pro 5.12 due to insecure file permissions. A low-privilege user can replace the WService.exe file with a malicious executable, which is then executed by the service running as Local System.
Description
Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable files. Attackers can rename the WService.exe file in the installation directory and replace it with a malicious executable that executes with LocalSystem privileges when the service is triggered.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in Splinterware System Scheduler Pro 5.12 due to insecure file permissions. A low-privilege user can replace the WService.exe file with a malicious executable, which is then executed by the service running as Local System.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H