Description (CNA)
Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration. Local attackers can exploit the unquoted path to inject malicious code that will execute with elevated LocalSystem privileges during service startup.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Andrea Electronics / Andrea ST Filters Service | affected 1.0.64.7 |
CWE
CWE-428
References
- https://www.exploit-db.com/exploits/48396
- https://andreaelectronics.com/
- https://www.vulncheck.com/advisories/andrea-st-filters-service-unquoted-service-path
ADP enrichment
No English description supplied.
No references supplied.