Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's named pipes. ASCService first tries to connect before trying to create the named pipes, because of that during login the service will try to connect to the attacker which will lead to either escalation of privileges (through token manipulation and ImpersonateNamedPipeClient() ) from ADMIN -> SYSTEM or from Local ADMIN-> Domain ADMIN depending on the user and named pipe that is used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IOBit Advanced System Care Free 安全漏洞
Vulnerability Description
IOBit Advanced System Care Free是英国IOBit公司的一款系统管理实用程序。该程序主要用于扫描、修复和优化系统等。 IOBit Advanced System Care Free 15存在安全漏洞。攻击者利用该漏洞升级权限。
CVSS Information
N/A
Vulnerability Type
N/A