CVE-2018-13101

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 has a privilege escalation flaw in the WCF endpoint. The exposed methods allow read/write access to the Windows registry and control of services, which attackers could abuse to escalate privileges via execution of attacker-controlled binari...