Samsung SW Update Software Local Elevation of Privilege Vulnerability

Samsung SW Update Software formerly known as Samsung Easy Software Manager is a suite of software for updating BIOS, drivers, etc. over the network from Samsung South Korea. A local elevation of privilege vulnerability exists in Samsung SW Update Software version 2.2.7.22 and earlier. A local...

Samsung SW Update 2.2.7.22 Insecure ACLs

Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2016-002 25-April-2016 Vendor: Samsung, www.samsung.com Affected Products: SW Update Affected Version: cacls "c:\Programdata\Samsung\SW...