Description (CNA)
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cooler Master Technology Inc. / Cooler Master MasterPlus | affected 1.8.5 |
CWE
CWE-427
References
- https://www.exploit-db.com/exploits/51159
- https://masterplus.coolermaster.com/
- https://www.vulncheck.com/advisories/coolermaster-masterplus-mpservice-unquoted-service-path
ADP enrichment
No English description supplied.
No references supplied.