Description (CNA)
WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files <x86>\WINPAKPRO\WPCommandFileService Service.exe to inject malicious code that would execute with LocalSystem permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Honeywell / WIN-PACK PRO | affected 4.8 |
CWE
CWE-428
References
- https://www.exploit-db.com/exploits/49692
- https://www.security.honeywell.com/product-repository/winpak
- https://www.vulncheck.com/advisories/win-pack-pro-wpcommandfileservice-unquoted-service-path
ADP enrichment
No English description supplied.
No references supplied.