high7.8
CVE-2022-33035
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
Impact
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netsarang | Xlpd | before 7.0.0103 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquoted-Service-Path.md
- https://www.netsarang.com/en/xlpd-update-history/
- https://github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquoted-Service-Path.md
- https://www.netsarang.com/en/xlpd-update-history/