{"uuid": "68b2f396-ef0b-43ad-bbb6-d86cf65db478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35312", "type": "seen", "source": "https://t.me/hacking_Attack/19237", "content": "Exploit Collector\nAmica Prodigy 1.7 Privilege Escalation\n\nhttps://1.bp.blogspot.com/-q1b99IBpI9c/WWlu5sPD0hI/AAAAAAAAIJI/No13BTu40mUIIhRH8r1ULckiDMJCd7zkQCLcBGAs/s1600/h106.png \nAmica Prodigy version 1.7 suffers from a local privilege escalation vulnerability.\n\nMD5 | d4ff2f09e7ae96200fd8a728e5838645\n\nDownload\n# Exploit Title: Amica Prodigy 1.7 - Privilege Escalation\n# Date: 2021-08-06\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://gestionaleamica.com - https://www.bisanziosoftware.com\n# Software Link: https://gestionaleamica.com/Download/AmicaProdigySetup.exe\n# Version: 1.7\n# Tested on: Windows 10 Pro 20H2 x64\n# CVE: CVE-2021-35312\n\nAmica Prodigy it's a backup solution from Amica softwares (GestionaleAmica: invoices, accounting, etc.,\nfrom website gestionaleamica.com), a CIR 2000 srl / Bisanzio Software srl\n\nA vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable\n\"RemoteBackup.Service.exe\" has incorrect permissions, allowing a local unprivileged user to replace it\nwith a malicious file that will be executed with \"LocalSystem\" privileges at scheduled time.\n\nC:\\Users\\user>icacls C:\\AmicaProdigy\\RemoteBackup.Service.exe\n\nC:\\AmicaProdigy\\RemoteBackup.Service.exe\nNT AUTHORITY\\Authenticated Users:(I)(M) NT\nAUTHORITY\\SYSTEM:(I)(F) BUILTIN\\Administrators:(I)(F)\nBUILTIN\\Users:(I)(RX) Elaborazione completata per 1 file.\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:30.045033Z"}