CVE-2020-23834 – Insecure Service File Permissions in the bd service in Real Time Logic Ba

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%bdbd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23834

Reference (s):

• https://github.com/boku7/BarracudaDrivev6.5-LocalPrivEsc
• https://www.exploit-db.com/exploits/48789