Ben Larkin

**Name of the Vulnerable Software and Affected Versions** RedSwimmer KioskSimple version 1.4.7.0 **Description** The issue concerns a privilege escalation vulnerability in the WCF endpoint of KioskSimpleService.exe. This vulnerability allows for read and write access to the Windows registry and control of services. An attacker could exploit these exposed methods to execute controlled binaries, leading to privilege escalation. **Recommendations** For RedSwimmer KioskSimple version 1.4.7.0, consider restricting access to the WCF endpoint as a temporary mitigation measure until a patch is available. Avoid using the vulnerable methods in the WCF endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.