Microsoft Windows EFSRPC Arbitrary File Upload / Privilege Escalation

The EFSRPC service on Microsoft Windows Server versions 2019 and 2022 does not prevent a caller specifying a local device path allowing any authenticated user to upload arbitrary files to a server.

MD5 | afc6cc4bf0749f217e9277351f3b9e94

Download

Source: packetstormsecurity.com