Asustor ABP and AES Unauthorized Code Execution Vulnerability via DLL Injection

A vulnerability exists in ASUSTOR Backup Plan (ABP) versions through 2.0.7.9050 and ASUSTOR EZSync (AES) versions through 1.0.6.8290. When these services are installed in a directory writable by non-administrative users, an attacker can replace or introduce a DLL with the same name as one used by the service. Upon restarting the service, the malicious DLL is executed under the LocalSystem account, leading to unauthorized code execution with elevated privileges.

Impact

Exploitation of this vulnerability allows for unauthorized code execution with elevated privileges, as the injected DLL is executed under the LocalSystem account.

Remediation

Users can upgrade to ABP version 2.0.7.10171 or AES version 1.1.0.10312 to address this vulnerability.