MSP360 Free Backup Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in MSP360 Free Backup. This issue allows attackers to escalate privileges on affected systems. Exploitation requires the ability to execute low-privileged code and user interaction from an administrator. The vulnerability arises in the restore functionality, where an attacker can create a junction to abuse the service, leading to the creation of arbitrary files. This exploitation can be used to escalate privileges and execute arbitrary code with SYSTEM rights.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker to execute arbitrary code in the context of the SYSTEM user.

Remediation

Users can upgrade to MSP360 Free Backup version 8.1.4 to address this vulnerability.