Avanquest Driver Updater Privilege Escalation Vulnerability

A vulnerability in Avanquest Driver Updater version 9.1.57803.1174 has been identified, allowing local attackers to escalate privileges. This issue arises from insecure permissions in the Driver Updater Service, which runs under SYSTEM privileges. The misconfiguration enables unprivileged users to manipulate the service's settings or exploit its functionality to gain elevated rights.

Impact

Exploitation of this vulnerability allows a local user to escalate privileges and gain administrative rights on the system.

Reproduction

The vulnerability can be reproduced by using a standard user account to access the Driver Updater Service, which is running with SYSTEM privileges. The PowerUp tool can then be employed to identify the insecure service and exploit it by adding the standard user account to the local administrators group.