An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by Microsoft itself."
References
| Link | Resource |
|---|---|
| https://ioctl.fail/echo-ac-writeup/ | Exploit Third Party Advisory |
Configurations
History
18 Oct 2023, 17:03
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://ioctl.fail/echo-ac-writeup/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:echo:anti_cheat_tool:*:*:*:*:*:*:*:* | |
| First Time |
Echo anti Cheat Tool
Echo |
|
| CWE | CWE-269 |
13 Oct 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by Microsoft itself." |
11 Oct 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-11 19:15
Updated : 2024-04-24 19:15
NVD link : CVE-2023-38817
Mitre link : CVE-2023-38817
CVE.ORG link : CVE-2023-38817
JSON object : View
Products Affected
echo
- anti_cheat_tool
CWE
CWE-269
Improper Privilege Management