Tcq itecproteccioappserver.exe unquoted service path Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2022-05-11 |
Type : local |
Platform : windows
This exploit / vulnerability Tcq itecproteccioappserver.exe unquoted service path is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
# Exploit Title: TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path
# Discovery by: Edgar Carrillo Egea - https://twitter.com/ecarrilloeg
# Discovery Date: 2022-04-25
# Vendor Homepage: https://itec.es/programas/
# Vulnerability Type: Unquoted Service Path Privilege Escalation
# Tested on OS: Microsoft Windows 11 Home
To properly exploit this vulnerability,
the local attacker must insert an executable file in the path of the service.
Upon service restart or system reboot, the malicious code will be run
with elevated privileges.
Nombre de host: DESKTOP-0DL5SID
Nombre del sistema operativo: Microsoft Windows 11 Home
Versión del sistema operativo: 10.0.22000 N/D Compilación 22000
Tcq itecproteccioappserver.exe unquoted service path