MegaTec NetAgent Privilege Escalation Vulnerability via Insecure Directory Permissions

A vulnerability exists in the MegaTec NetAgent application, specifically within the CMService.exe component, which creates the C:\usr directory and its subdirectories with insecure permissions. This misconfiguration allows write access to all authenticated users. As a result, attackers could potentially replace critical configuration files, such as snmp.conf, or hijack DLLs to escalate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation by allowing attackers to replace configuration files or hijack DLLs.

Remediation

Users can download the latest firmware versions addressing this vulnerability from the MegaTec Software Download Center. Specific firmware files are available for different NetAgent models.