VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae - | |
| References | () https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html - Third Party Advisory, VDB Entry |
07 Nov 2023, 04:08
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
22 Mar 2023, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html - Third Party Advisory, VDB Entry | |
| References | (MISC) https://medium.com/@SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:vxsearch:vx_search:14.7:*:*:*:*:*:*:* cpe:2.3:a:vxsearch:vx_search:13.8:*:*:*:*:*:*:* |
|
| CWE | CWE-428 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Vxsearch vx Search
Vxsearch Microsoft windows Microsoft |
Information
Published : 2023-03-16 12:15
Updated : 2024-11-21 07:48
NVD link : CVE-2023-24671
Mitre link : CVE-2023-24671
CVE.ORG link : CVE-2023-24671
JSON object : View
Products Affected
vxsearch
- vx_search
microsoft
- windows
CWE
CWE-428
Unquoted Search Path or Element