GRAU DATA Blocky Client-Side Enforcement of Server-Side Security Vulnerability Allowing Privilege Escalation

A client-side enforcement of server-side security vulnerability has been identified in GRAU DATA Blocky versions prior to 3.1. This vulnerability allows an attacker with Windows administrative or debugging privileges to modify a binary either in memory or on disk. By doing so, the attacker can bypass the password login requirement, gaining unrestricted access to all program functions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the application, allowing the attacker to access all functions of the program with elevated privileges.

Remediation

Users are advised to update Blocky to version 3.1. Instructions for updating can be requested through the GRAU DATA support request page.