PT-2021-20947 · Terarecon · Terarecon Aqnetclient

Christina Marshall · Published 2021-09-01 · Updated 2022-07-12 · CVE-2021-35508

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TeraRecon AQNetClient version 4.4.13

Description: The issue allows attackers to execute a malicious binary with SYSTEM privileges via a low-privileged user account. To exploit this, a low-privileged user must change the service configuration or overwrite the binary service.

Recommendations: For TeraRecon AQNetClient version 4.4.13, consider restricting access to the service configuration and binary to prevent low-privileged users from making changes. As a temporary workaround, monitor the service and binary for any unauthorized modifications until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2021-35508

Affected Products

Terarecon Aqnetclient

References · 4

• 🔥 https://linkedin.com/pulse/cve-2021-35508-privilege-escalation-via-weak-windows-marshall-mba · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-35508 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35508 · Vendor Advisory
• https://terarecon.sharefile.com/d-s05c8b7792f354a2d8115789a02449c4a · Note