A local buffer overflow vulnerability in Iperius Backup 5.8.1 allows a local attacker to achieve arbitrary code execution with application privileges.

The application contains a local buffer overflow vulnerability within its structured exception handling (SEH) mechanism. An unauthenticated local attacker can trigger this flaw by providing a malicious file path within the external file location field of a backup job, leading to arbitrary code execution when the job is processed.

Successful exploitation allows an attacker with local access to execute arbitrary code with the privileges of the Iperius Backup application. This could result in full system compromise, unauthorized data access, or the deployment of persistent malware. Given the CVSS score of 8.4, this vulnerability represents a high risk to organizational security, particularly on systems where backup software runs with elevated permissions.

Immediate Action: Upgrade to the latest version of Iperius Backup to receive the vendor security updates addressing this flaw.

Proactive Monitoring: Monitor system logs for unauthorized attempts to modify backup job configurations or unexpected process crashes associated with the Iperius Backup service.

Compensating Controls: Restrict local access to the system to authorized personnel only, and ensure that the application is executed with the minimum necessary privileges to perform its functions.

Public Exploit Available: Yes, a public exploit exists as documented in the Exploit Database (EDB-ID: 46059).

The presence of a public exploit increases the urgency of this remediation. Organizations utilizing Iperius Backup 5.8.1 must prioritize upgrading their installation to a patched version immediately to prevent potential local code execution and system compromise.