Intel(R) Management Engine Components 6.0.0.1189 – ‘LMS’ Unquoted Service Path

Exploit Database
14 阅读

作者： SamAlucard

日期： 2022-02-18
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50762/

#Exploit Title: Intel(R) Management Engine Components 6.0.0.1189 - 'LMS' Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2022-02-17
#Vendor :Intel
#Version : Intel(R) Management Engine Components 6.0.0.1189
#Vendor Homepage : https://www.intel.com
#Tested on OS: Windows 7 Pro

#Analyze PoC :
==============

C:\>sc qc LMS
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: LMS
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\LMS\LMS.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : Intel(R) Management and Security Application
Local Management Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
Intel(R) Management Engine Components 6.0.0.1189 – ‘LMS’ Unquoted Service Path的更多信息

Adrenalin Player 2.2.5.3 – ‘.asx’ Local Buffer Overflow (SEH)：
HomeGuard Pro 9.3.1 – Insecure Folder Permissions：
Linux Kernel (x86) – Memory Sinkhole Privilege Escalation：
Wacom WTabletService 6.6.7-3 – ‘WTabletServicePro’ Unquoted Service Path：
Linux Kernel 2.6.32 (Ubuntu 10.04) – ‘/proc’ Handling SUID Privilege Escalation：
usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) – Local Privilege Escalation：
AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)：
BacklinkSpeed 2.4 – Buffer Overflow PoC (SEH)：