Lame write-up by Arrexel

You could also use RCE on port 3632 and get a user this way. I did privesc with firefart but I’m sure there are many other ways to get root.