MegaTec UPSilon 2000 RupsMon.exe Service Executable Insecure Permissions Allowing Privilege Escalation

A vulnerability exists in the RupsMon.exe service executable of MegaTec UPSilon 2000 due to insecure permissions that grant the 'Everyone' group Full Control. This flaw enables local attackers to replace the executable with a malicious binary, executing code with SYSTEM privileges. Alternatively, attackers can modify the service's configuration path to execute commands, using the service management functions to achieve code execution and privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized code execution with SYSTEM privileges, leading to privilege escalation.