A local privilege escalation vulnerability in AOMEI Backupper Workstation 4.7.2 could allow an authenticated attacker to achieve full system compromise with SYSTEM-level privileges.

This vulnerability is a link following flaw (CWE-59) within the software's restore functionality. An attacker with low-privileged access must create a malicious junction to manipulate file operations, which, when triggered by an administrator, leads to arbitrary file creation and SYSTEM-level code execution.

Successful exploitation of this vulnerability grants an attacker complete control over the affected system, as the code executes with SYSTEM privileges. Given the CVSS score of 7.3, this represents a high-severity risk that could lead to full data compromise, lateral movement within the network, and complete loss of system integrity.

Immediate Action: Update AOMEI Backupper Workstation to the latest available version provided by the vendor to resolve the insecure file handling.

Proactive Monitoring: Monitor system logs for unusual file creation activity or the creation of unexpected junctions in directories associated with backup and restore processes.

Compensating Controls: Restrict the ability of low-privileged users to interact with service-related directories and ensure that administrative tasks are performed with the principle of least privilege.

Public Exploit Available: Unknown.

The severity of this flaw, which allows for full privilege escalation to SYSTEM, warrants immediate attention despite the required user interaction. Administrators should prioritize patching AOMEI Backupper Workstation across all workstations to eliminate the attack vector and prevent potential unauthorized escalation of privileges.