Msry1

CYRISMA Sensor before version 444 for Windows contains an insecure folder and file permissions issue. A low-privileged user can exploit this to escalate privileges and execute arbitrary code with NT AUTHORITYSYSTEM privileges. This is achieved by replacing `DataSpotliteAgent.exe` or other binaries called by the `Cyrisma Agent` service during startup.

The issue is a local file inclusion vulnerability in Modules.php, specifically affecting the `modname` parameter. This vulnerability can disclose arbitrary files from the server's filesystem, provided the application has access to the file.