Samsung SW Update Service Privilege Escalation
Posted by deepcore on November 12, 2016 – 1:59 am
Samsung Software Update Service, SWUpdateService (SWMAgent.exe), installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.
Post a reply
You must be logged in to post a comment.