Remote Utilities Pte. Ltd. vulnerabilities and threats

Remote Utilities Host versions up to 7.7.3.0 improperly assign full control permissions to the Everyone group on DLL files in the installation directory. This insecure permission setting allows a local unprivileged attacker to replace DLLs during a service stop window, leading to potential execution of malicious code with SYSTEM privileges upon service restart. The vulnerability affects multiple DLLs including libasset32.dll and others. The CVSS 4.0 score is 7.3, indicating high severity.