CVE-2019-1322

This repository contains a functional exploit for CVE-2019-1322, which leverages the UPnP Device Host Service to escalate privileges to SYSTEM. The exploit manipulates the Update Orchestrator Service (UsoSvc) to execute arbitrary commands with elevated privileges.

The provided content lacks actual exploit code and instead directs users to external downloads (GitLab binaries) and a GitHub release. The README is vague, lacks technical details about the vulnerability, and reads more like a sales pitch than a legitimate writeup.

This Metasploit module exploits CVE-2019-1322 and CVE-2019-1405 to achieve local privilege escalation on Windows 10 by leveraging the UPnP Device Host Service and Update Orchestrator Service to elevate from a low-privilege user to SYSTEM.