The HCServer service in Hosting Controller HC10 1014 allows an Invalid Pointer Write DoS if attackers can reach the service on port 8794 In addition this can potentially be leveraged for post exploit persistence with SYSTEM privileges, if physical access or malware is involved If a physical attacker or malware can set its own program for the se ...