high7.8
CVE-2023-24671
VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated pri…
Impact
VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vxsearch | Vx Search | Versions 13.8, 14.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae
- https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html
- https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae
- https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html