AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in AOMEI Backupper Workstation. This issue arises within the restore functionality, where an attacker can create a junction to manipulate the service into generating arbitrary files. To exploit this vulnerability, an attacker must first have the ability to execute low-privileged code on the target system and require user interaction from an administrator.

Impact

Exploitation of this vulnerability allows local attackers to escalate privileges and execute arbitrary code with SYSTEM rights on the affected system.

Remediation

Due to the nature of this vulnerability, the primary recommendation is to limit interaction with the AOMEI Backupper Workstation product.