Privilege Escalation Flaws Found in Preinstalled Acer, ASUS Software

guest · Dec 18, 2019

Privilege Escalation Flaws Found in Preinstalled Acer, ASUS Software
December 18, 2019
https://www.securityweek.com/privilege-escalation-flaws-found-preinstalled-acer-asus-software

The first bug impacts Acer Quick Access, an application that allows users to toggle wireless devices on or off, to modify power-off USB charge settings and network sharing options, and more.
The issue, SafeBreach explains, is that part of the software runs with SYSTEM privileges, and it unsafely attempts to load three missing DLL files. An attacker with administrator privileges can plant malicious versions of these missing files and they would get executed with elevated permissions.

The second flaw impacts ASUS ATK Package and can be exploited during the post-compromise phase of an attack, to achieve persistence and evade detection, SafeBreach says.
The researchers discovered that the application’s ASLDR Service (AsLdrSrv.exe), a signed process that runs at system startup with SYSTEM privileges, attempts to locate missing EXE files before loading the required executable.

Tracked as CVE-2019-19235, the vulnerability was found to impact ASUS ATK Package 1.0.0060 and all prior versions, and was addressed in November with the release of ATK Package 1.0.0061.
Click to expand...

Log in or Sign up

Privilege Escalation Flaws Found in Preinstalled Acer, ASUS Software

guest Guest

Log in or Sign up

Privilege Escalation Flaws Found in Preinstalled Acer, ASUS Software

guest Guest

Useful Searches