Security & Vulnerability Researcher / Professional Penetration Tester

CVE-2020-16268 - 1E - Improper Neutralization of Special Elements

The MSI installer in 1E Client and allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM (MST) with the option to disable the installation of the Nomad module. An attacker may craft a .reg file in a specific location that will be able to write to any registry key as an elevated user.

1E Security Advisory

buy me a coffee