ID de Prueba:	1.3.6.1.4.1.25623.1.0.146932
Categoría:	Privilege escalation
Título:	AnyDesk Desktop Privilege Escalation Vulnerability (Oct 2021) - Windows
Resumen:	AnyDesk Desktop is prone to a privilege escalation; vulnerability.
Descripción:	Summary: AnyDesk Desktop is prone to a privilege escalation vulnerability. Vulnerability Insight: AnyDesk Desktop for Windows allows for a local escalation of privileges through the UI. When a connection has been accepted, the user can click the 'Open Chat Log' link in the connection window. This will open Notepad with escalated privileges. The user can then use the 'File -> Open...' dialog, to start any application as administrator. Vulnerability Impact: A user with restricted privileges can use AnyDesk to obtain administrator privileges. Note: the vulnerability can not be exploited remotely because AnyDesk blocks remote interaction with the chat window. Affected Software/OS: AnyDesk Desktop version 3.1.0 through 6.3.2 (excluding 6.2.6) on Windows. Solution: Update to version 6.2.6, 6.3.3 or later. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-40854 https://anydesk.com/cve/2021-40854/
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.