GHSA-9jr3-q9q2-459gHighCVSS 7.8
WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user...
🔗 CVE IDs covered (1)
📋 Description
WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2021-34110
- https://exchange.xforce.ibmcloud.com/vulnerabilities/204780
- https://packetstormsecurity.com/files/163335/WinWaste.NET-1.0.6183.16475-Local-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/50083
- http://nica.it
- http://winwastenet.com
- https://github.com/advisories/GHSA-9jr3-q9q2-459g