Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-22752. PoCs published by hacker625.
AI-analyzed exploit summary This repository provides a functional proof-of-concept for CVE-2024-22752, an elevation of privilege vulnerability in EaseUS MobiMover 6.0.5. The exploit leverages weak file permissions to replace a service executable with a malicious binary, achieving privilege escalation when an administrator runs the application.
Description
Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory.
Exploits (1)
This repository provides a functional proof-of-concept for CVE-2024-22752, an elevation of privilege vulnerability in EaseUS MobiMover 6.0.5. The exploit leverages weak file permissions to replace a service executable with a malicious binary, achieving privilege escalation when an administrator runs the application.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N