Privilege escalation via modified TCP login packets

Privilege escalation in Ocuco Innovation 2.10.24.51 allows local users to gain administrative access through STOCKORDERENTRY.EXE. The component processes an intercepted TCP login packet after attacker-controlled bytes are replaced with spaces, triggers an access violation in VCRUNTIME140.dll, and then exposes Stock Order Entry without an authorization check. A low-privileged local position capable of intercepting and altering the application's TCP traffic is required, after which Stock Order Entry functions become available with administrative privileges.