An elevation of privilege vulnerability in Ross Video DashBoard 8.5.1 allows authenticated users to replace the application binary with a malicious executable, potentially granting full system control.

The application suffers from an improper permission assignment (CWE-732) where the Authenticated Users group is granted Modify or Change permissions on the DashBoard.exe binary. This allows any authenticated user to overwrite the legitimate application file with a malicious payload, which will execute with elevated privileges when the application is run.

Successful exploitation of this vulnerability leads to a complete compromise of the host system. Because an attacker can replace the application binary with arbitrary code, they can gain full control over the machine, leading to unauthorized data access, the installation of persistent backdoors, and potential lateral movement within the production network. Given the CVSS score of 8.8, this represents a high-severity risk that could lead to significant operational disruption and security failure.

Immediate Action: Update to the latest version of Ross Video DashBoard as provided by the vendor to ensure correct file permissions are applied. If an update is not immediately feasible, manually modify the NTFS permissions on the DashBoard.exe file to restrict write access to the Administrators group only.

Proactive Monitoring: Monitor Windows security logs for unexpected process execution or modifications to application binaries within the installation directory. Review logs for account activity that deviates from standard operational procedures.

Compensating Controls: Ensure that the principle of least privilege is strictly enforced on all workstations running the software, limiting the number of users who have local interactive login rights. Utilize endpoint detection and response tools to alert on file integrity changes in protected program directories.

Public Exploit Available: Yes, a proof of concept and technical write up are available via ExploitDB (EDB-ID: 46742).

This vulnerability presents a clear path to local privilege escalation that could be leveraged by an attacker to gain full administrative control over affected systems. Organizations must prioritize applying the vendor provided security updates to rectify the underlying permission flaw. If patching is delayed, immediate manual remediation of the file system permissions is required to prevent unauthorized binary modification.