Relaying Potatoes: Another Unexpected Privilege Escalation Vulnerability in Windows RPC Protocol - SentinelLabs

Exploitation of the Unauthenticated RPC2_Login Endpoint for Session Token Retrieval and External Callback in the OSIRIS Security Camera. In a recent Internal Penetration Testing assessment, we discovered a critical vulnerability in the OSIRIS security camera, which had been assumed to be secure. By targeting an exposed /RPC2_Login endpoint, we obtained live session tokens and cryptographic challenge data without supplying valid credentials. What looked like a simple login test quickly escalated

The RPC server is unavailable in Windows 11