Description (CNA)
SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SANYO DENKI CO., LTD. / SANUPS SOFTWARE STANDALONE | affected Ver.1.0.1 to Ver.1.1.4 |
| SANYO DENKI CO., LTD. / SANUPS SOFTWARE | affected Ver.2.0.0 to Ver.2.0.2; affected Ver.1.0.0 to Ver.1.1.4 |
CWE
CWE-428
References
- https://products.sanyodenki.com/media/document/sanups/H0033449_en.pdf
- https://products.sanyodenki.com/media/document/sanups/H0033413_jp.pdf
- https://jvn.jp/en/jp/JVN90835713/
ADP enrichment
No English description supplied.
No references supplied.