HP System Event Utility Local Privilege Escalation
Posted by deepcore on February 13, 2020 – 5:38 am
The HP System Event service “HPMSGSVC.exe” will load an arbitrary EXE and execute it with SYSTEM integrity. HPMSGSVC.exe runs a background process that delivers push notifications. The problem is that the HP Message Service will load and execute any arbitrary executable named “Program.exe” if it is found in the user’s c: drive.
Post a reply
You must be logged in to post a comment.