Description (CNA)
MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable earlier in the search order, resulting in arbitrary code execution in the context of the affected user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mobatek / MobaXterm | affected 0 before 26.1 |
CWE
CWE-428
References
- https://mobaxterm.mobatek.net/download-home-edition.html
- https://www.vulncheck.com/advisories/mobaxterm-notepad-unquoted-service-path
ADP enrichment
No English description supplied.
No references supplied.