Local Privilege Escalation in SUPERAntiSyware Professional X Trial 10.0.1206 via Malicious DLL Restoration

CVE-2020-24955 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as malware.

Learn more about our Api Penetration Testing.