CVE-2023-31468

CVE-2023-31468 affects Inosoft VisiWin 7 through 2022-2.1. The issue arises from insecure/weak permissions set on the folder C:\Program Files (x86)\INOSOFT GmbH, enabling a low-privilege user to drop a Trojan horse file that can execute with SYSTEM privileges, leading to privilege escalation. The...

Inosoft VisiWin 7 2022-2.1 Insecure Permissions / Privilege Escalation

Exploit Title: Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions Privilege Escalation Date: 2023-08-09 Exploit Author: Carlo Di Dato for Deloitte Risk Advisory Italia Vendor Homepage: https://www.inosoft.com/ Version: Up to 2022-2.1 Runtime RT7.3 RC3 20221209.5 Tested on: Windows CVE:...