Samsung SW Update Service Privilege Escalation

Discussion in 'News Aggregator' started by Packet Storm, 11 Nov 2016.

  1. Packet Storm

    Packet Storm Guest

    Samsung Software Update Service, SWUpdateService (SWMAgent.exe), installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.

    Continue reading...
     

Share This Page

Loading...