EUVD-2021-21955

Malware in sbrugna...

CVE-2021-35312

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges...

CVE-2021-35312

CVE-2021-35312 affects CIR 2000 / Gestionale Amica Prodigy v1.7. The vulnerability stems from incorrect permissions on RemoteBackup.Service.exe, allowing a local unprivileged user to replace the executable and execute code with LocalSystem privileges (privilege escalation). Public documents (Expl...

CVE-2021-35312: Incorrect Default Permissions

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Service.exe" has incorrect permissions, allowing a local unprivileged user to replace it with a malicious file that will be executed with "LocalSystem" privileges...