Privilege escalation

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

The CVE-2019-13208 vulnerability affects Waves MAXX Audio: WavesSysSvc64.exe (v1.9.29.0) suffers privilege escalation due to DLL side loading caused by the General registry key granting Full Control to the Users group. This is a local escalation scenario with potential high impact as described in...

CVE-2017-6005

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...

PT-2017-16824

Name of the Vulnerable Software and Affected Versions Waves MaxxAudio version 1.1.6.0 Description The issue concerns a vulnerability known as Unquoted Service Path in the WavesSysSvc Windows service. This could potentially allow an authorized but non-privileged local user to execute arbitrary cod...

CVE-2017-6005: Undefined Security Weakness

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileg...