Honeywell IQ MultiAccess Update Service 27 / 28 Privilege Escalation

Honeywell IQ MultiAccess Update Service suffers from a local privilege escalation vulnerability. Due to a named pipe configured with a NULL DACL a low-privileged user can use the pipe to communicate with the IQUpdSrv service running as SYSTEM. When providing specific data over the pipe, arbitrary...