https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-34110_WinWaste.NET_1.0.6183.16475_%E6%9C%AC%E5%9C%B0%E6%AC%8A%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E CVE-2021-34110 WinWaste.NET 1.0.6183.16475 本地權限提升漏洞 - Revision history 2026-04-09T04:56:43Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=CVE-2021-34110_WinWaste.NET_1.0.6183.16475_%E6%9C%AC%E5%9C%B0%E6%AC%8A%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E&diff=6142&oldid=prev Pwnwiki: Marked this version for translation 2021-07-02T08:00:32Z <p>Marked this version for translation</p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="chinese"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 08:00, 2 July 2021</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;languages /&gt;</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;languages /&gt;</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;translate&gt;</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;translate&gt;</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>==影響版本==</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>==影響版本== <ins class="diffchange diffchange-inline">&lt;!--T:1--&gt;</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;/translate&gt;</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;/translate&gt;</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Version: 1.0.6183.16475</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Version: 1.0.6183.16475</div></td></tr> <!-- diff cache key pwn_wiki:diff::1.12:old-6141:rev-6142 --> </table> Pwnwiki https://pwnwiki.com/index.php?title=CVE-2021-34110_WinWaste.NET_1.0.6183.16475_%E6%9C%AC%E5%9C%B0%E6%AC%8A%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E&diff=6141&oldid=prev Pwnwiki: Created page with "<languages /> <translate> ==影響版本== </translate> Version: 1.0.6183.16475 ==EXP== <pre> # Exploit Title: WinWaste.NET - Privilege Escalation due Incorrect Access Contro..." 2021-07-02T08:00:15Z <p>Created page with &quot;&lt;languages /&gt; &lt;translate&gt; ==影響版本== &lt;/translate&gt; Version: 1.0.6183.16475 ==EXP== &lt;pre&gt; # Exploit Title: WinWaste.NET - Privilege Escalation due Incorrect Access Contro...&quot;</p> <p><b>New page</b></p><div>&lt;languages /&gt;<br /> &lt;translate&gt;<br /> ==影響版本==<br /> &lt;/translate&gt;<br /> Version: 1.0.6183.16475<br /> <br /> ==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: WinWaste.NET - Privilege Escalation due Incorrect Access Control<br /> # Date: 2021-07-01<br /> # Author: Andrea Intilangelo<br /> # Vendor Homepage: http://nica.it - http://winwastenet.com<br /> # Version: 1.0.6183.16475<br /> # Tested on: Windows 10 Pro x64 - 20H2 and 21H1<br /> # CVE: CVE-2021-34110<br /> <br /> WinWaste.NET version 1.0.6183.16475 (from Nica s.r.l., a Zucchetti Group company) allows a local unprivileged user to replace the executable with a malicious file that will be executed with &quot;LocalSystem&quot; privileges.<br /> <br /> (1) Affected service's executable: &quot;C:\Program Files (x86)\WW.NET\WW.PROG\WinWasteService.exe&quot;<br /> <br /> (2) Attack Vectors: replacing the WinWasteService.exe and/or any tied .dll used by the software.<br /> <br /> (3) Details:<br /> <br /> C:\Users\user&gt;sc qc winwasteservice<br /> [SC] QueryServiceConfig OPERAZIONI RIUSCITE<br /> <br /> NOME_SERVIZIO: winwasteservice<br /> TIPO : 10 WIN32_OWN_PROCESS<br /> TIPO_AVVIO : 2 AUTO_START<br /> CONTROLLO_ERRORE : 1 NORMAL<br /> NOME_PERCORSO_BINARIO : &quot;C:\Program Files (x86)\WW.NET\WW.PROG\WinWasteService.exe&quot;<br /> GRUPPO_ORDINE_CARICAMENTO :<br /> TAG : 0<br /> NOME_VISUALIZZATO : WinwasteService<br /> DIPENDENZE :<br /> SERVICE_START_NAME : LocalSystem<br /> <br /> <br /> C:\Users\user&gt;icacls &quot;C:\Program Files (x86)\WW.NET\WW.PROG\WinWasteService.exe&quot;<br /> C:\Program Files (x86)\WW.NET\WW.PROG\WinWasteService.exe Everyone:(I)(M)<br /> NT AUTHORITY\SYSTEM:(I)(F)<br /> BUILTIN\Administrators:(I)(F)<br /> BUILTIN\Users:(I)(RX)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(I)(RX)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(I)(RX)<br /> <br /> Elaborazione completata per 1 file. Elaborazione non riuscita per 0 file<br /> <br /> C:\Users\user&gt;cacls &quot;C:\Program Files (x86)\WW.NET\WW.PROG\WinWasteService.exe&quot;<br /> C:\Program Files (x86)\WW.NET\WW.PROG\WINWASTESERVICE.EXE Everyone:(ID)C<br /> NT AUTHORITY\SYSTEM:(ID)F<br /> BUILTIN\Administrators:(ID)F<br /> BUILTIN\Users:(ID)R<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(ID)R<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(ID)R<br /> <br /> C:\Users\user&gt;icacls &quot;C:\Program Files (x86)\WW.NET\WW.PROG&quot;<br /> C:\Program Files (x86)\WW.NET\WW.PROG Everyone:(I)(OI)(CI)(M)<br /> NT SERVICE\TrustedInstaller:(I)(F)<br /> NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)<br /> NT AUTHORITY\SYSTEM:(I)(F)<br /> NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)<br /> BUILTIN\Administrators:(I)(F)<br /> BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)<br /> BUILTIN\Users:(I)(RX)<br /> BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)<br /> CREATOR OWNER:(I)(OI)(CI)(IO)(F)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(I)(RX)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(I)(OI)(CI)(IO)(GR,GE)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(I)(RX)<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(I)(OI)(CI)(IO)(GR,GE)<br /> <br /> Elaborazione completata per 1 file. Elaborazione non riuscita per 0 file<br /> <br /> <br /> C:\Users\user&gt;cacls &quot;C:\Program Files (x86)\WW.NET\WW.PROG\&quot;<br /> C:\Program Files (x86)\WW.NET\WW.PROG Everyone:(OI)(CI)(ID)C<br /> NT SERVICE\TrustedInstaller:(ID)F<br /> NT SERVICE\TrustedInstaller:(CI)(IO)(ID)F<br /> NT AUTHORITY\SYSTEM:(ID)F<br /> NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(ID)F<br /> BUILTIN\Administrators:(ID)F<br /> BUILTIN\Administrators:(OI)(CI)(IO)(ID)F<br /> BUILTIN\Users:(ID)R<br /> BUILTIN\Users:(OI)(CI)(IO)(ID)(accesso speciale:)<br /> GENERIC_READ<br /> GENERIC_EXECUTE<br /> <br /> CREATOR OWNER:(OI)(CI)(IO)(ID)F<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(ID)R<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI:(OI)(CI)(IO)(ID)(accesso speciale:)<br /> GENERIC_READ<br /> GENERIC_EXECUTE<br /> <br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(ID)R<br /> AUTORITÀ PACCHETTI APPLICAZIONI\TUTTI I PACCHETTI APPLICAZIONI CON RESTRIZIONI:(OI)(CI)(IO)(ID)(accesso speciale:)<br /> GENERIC_READ<br /> GENERIC_EXECUTE<br /> &lt;/pre&gt;</div> Pwnwiki