Shanghai Bairui Information Technology SunloginClient Uncontrolled Search Path Vulnerability in Process.dll

A critical vulnerability exists in Shanghai Bairui Information Technology SunloginClient version 15.8.3.19819. The issue arises in the library process.dll, specifically within the file sunlogin_guard.exe, where an uncontrolled search path vulnerability has been introduced. This vulnerability requires local access to exploit and is characterized by a high complexity, making it difficult to execute. Although the vulnerability has been publicly disclosed and could potentially be exploited, the vendor has not responded to prior disclosure attempts.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution, allowing an attacker to execute malicious code with the privileges of the user running the SunloginClient.