CVE-2019-25568
CRITICALMemu Play 6.0.7 Privilege Escalation via Insecure File Permissions
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25568. PoCs published by Alejandra Sánchez.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Memu Play 6.0.7 due to insecure file permissions on the MemuService.exe file. A low-privilege user can replace the executable with a malicious one, which executes with SYSTEM privileges upon system restart.
Description
Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in Memu Play 6.0.7 due to insecure file permissions on the MemuService.exe file. A low-privilege user can replace the executable with a malicious one, which executes with SYSTEM privileges upon system restart.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H