G DATA Security Client Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in G DATA Security Client. This issue arises from an incorrect assignment of privileges to directories, allowing a local, unprivileged attacker to escalate privileges on affected installations. The vulnerability can be exploited by placing an arbitrary executable in a globally writable directory, which is then executed by the SetupSVC.exe service with SYSTEM privileges.

Impact

Exploitation of this vulnerability allows for local privilege escalation, with unauthorized users gaining SYSTEM-level access.

Remediation

Users can upgrade to G DATA Security Client version 15.8.333 to address this vulnerability.