iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges.
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
Link | Tags |
---|---|
https://www.remotepc.com/release-info | release notes vendor advisory |
https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_01.txt | third party advisory |