Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-53949. PoCs published by Zer0FauLT.
AI-analyzed exploit summary This exploit demonstrates a local privilege escalation (LPE) in AspEmail 5.6.0.2 by leveraging weak service binary permissions. The attacker replaces the service binary with a malicious executable to gain SYSTEM privileges.
Description
AspEmail 5.6.0.2 contains a binary permission vulnerability that allows local users to escalate privileges through the Persits Software EmailAgent service. Attackers can exploit full write permissions in the BIN directory to replace the service executable and gain elevated system access.
Exploits (1)
This exploit demonstrates a local privilege escalation (LPE) in AspEmail 5.6.0.2 by leveraging weak service binary permissions. The attacker replaces the service binary with a malicious executable to gain SYSTEM privileges.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H