Littlesurii

**Name of the Vulnerable Software and Affected Versions** MSI NBFoundation Service version 2.0.2506.1201 **Description** Insecure permissions in the service allow a remote attacker to obtain sensitive information through the `MSI SERVICE 2` pipe. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MSI NBFoundation Service version 2.0.2506.1201 **Description** Insecure permissions allow a remote attacker to obtain sensitive information by exploiting the 3DES-ECB encryption method. 3DES-ECB (Triple Data Encryption Standard in Electronic Codebook mode) is a symmetric-key block cipher that encrypts data in blocks without using an initialization vector, which can lead to patterns in the ciphertext. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MSI NBFoundation Service version 2.0.2506.1201 **Description** Insecure permissions in the `MSIAPService.exe` component allow a remote attacker to obtain sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.