Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation
Posted by deepcore on May 13, 2020 – 8:53 pm
Druva inSync client for Windows exposes a network service on TCP port 6064 on the local network interface. inSync versions 6.5.2 and prior do not validate user-supplied program paths in RPC type 5 messages, allowing execution of arbitrary commands as SYSTEM. This Metasploit module has been tested successfully on inSync version 6.5.2r99097 on Windows 7 SP1 (x64).
Post a reply
You must be logged in to post a comment.