Xnand

يمكن لمهاجم موجود على الشبكة المجاورة تنفيذ تعليمات برمجية عشوائية على تثبيتات WatchYourLAN المتأثرة دون الحاجة إلى المصادقة. تنشأ المشكلة عن عدم التحقق الكافي من صحة المدخلات التي يقدمها المستخدم للمعلمة `arpstrs` قبل استخدامها في استدعاء نظامي، مما يؤدي إلى حقن المعلمات. يتيح الاستغلال الناجح للمهاجم تنفيذ تعليمات برمجية بامتيازات حساب الخدمة.

The issue is related to local privilege escalation via named pipe due to improper access control checks. This allows for unauthorized access and potential system compromise.

The issue concerns an OpenSSL component in Acronis True Image 2021, where the OPENSSLDIR variable is specified as a subdirectory within C:jenkins agent. This component is used by a privileged service within Acronis True Image. An unprivileged Windows user can create subdirectories off the system root, potentially allowing the creation of a specially-crafted openssl.cnf file. This could lead to arbitrary code execution with SYSTEM privileges.

The issue arises from improper ACL settings of the C:ProgramDataAcronis directory by Acronis True Image 2021. This allows an unprivileged user to execute arbitrary code with SYSTEM privileges by placing a DLL in specific paths within C:ProgramDataAcronis.

The issue concerns an OpenSSL component in Acronis Cyber Backup and Cyber Protect that specifies an OPENSSLDIR variable as a subdirectory within C:jenkins agent. This component is used by a privileged service in these products. Unprivileged Windows users can create subdirectories off of the system root, allowing a user to create a path to a specially-crafted openssl.cnf file. This can lead to arbitrary code execution with SYSTEM privileges.