Macrium Reflect CVE-2020-10143 Arbitrary Code Execution Vulnerability

Description

Macrium Reflect's privileged service uses an OpenSSL component with OPENSSLDIR set to C:\\\\openssl\\\\; because users can create subdirectories under the system root, they can place a crafted openssl.cnf to achieve arbitrary code execution with SYSTEM privileges.

Affected Applications

Macrium Reflect

References