Advisories

SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path

Go Back
severity
high
date
Affecting
  • SOUND4 Server Service 4.1.102

CWE
  • CWE-428 Unquoted Search Path or Element
CVSS
8.6
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
LiquidWorm as Gjoko Krstic of Zero Science Lab
Description
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.