A local privilege escalation vulnerability in BenimPOS Masaustu 3.0.x allows unauthorized users to gain elevated system access through insecure file permissions.

This vulnerability involves insecure file permissions where the application installation directory grants broad access to local users. By modifying or replacing .exe and .dll files within this directory, a low privileged user can achieve arbitrary code execution when the application is launched.

The potential for privilege escalation poses a significant risk to the integrity and security of the host system. Successful exploitation allows a local attacker to execute malicious code with elevated privileges, which could lead to complete system compromise, unauthorized data access, or the deployment of persistent malware. Given the CVSS score of 7.8, this flaw represents a high-severity risk to any organization utilizing this software.

Immediate Action: Restrict directory permissions on the BenimPOS installation folder to ensure that only administrative accounts have write access, as no formal vendor patch is currently confirmed.

Proactive Monitoring: Monitor system logs for unauthorized file modifications or unexpected process execution originating from the BenimPOS installation directory.

Compensating Controls: Implement File Integrity Monitoring (FIM) to alert security teams if sensitive executable files within the application directory are modified.

Public Exploit Available: Yes, a public proof-of-concept repository exists on GitHub, as referenced by the CVE record.

Organizations must prioritize securing the installation directory permissions for BenimPOS Masaustu 3.0.x to prevent local privilege escalation. While no vendor patch is explicitly confirmed, manual hardening of file system access controls is essential to mitigate this risk. Security teams should monitor for any vendor updates and apply them immediately upon release to resolve the underlying insecure configuration.