Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Bdrive NetDrive. This issue arises from the product loading an OpenSSL configuration file from an unsecured location, allowing local attackers to escalate privileges and execute arbitrary code with SYSTEM rights. To exploit this vulnerability, an attacker must first have the ability to run low-privileged code on the affected system.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker to execute arbitrary code in the context of the SYSTEM user.