A stack buffer overflow was found in the sidGET parameter of
several requests of DupScout Enterprise 10.0.18 which can be exploited
by an unauthenticated, remote user to gain NT AUTHORITY\SYSTEM privileges
on the server holding the affected software.
Exploit
A first version of the exploit was published at
Exploit DB
and an updated exploit can be found here.
Mitigation
An updated version of DupScout Enterprise
is available at the vendor page.
Credits
The vulnerability was discovered by Andrés Roldán
from the Offensive Team of Fluid Attacks.
