medium6.7Public exploit code
CVE-2024-31804
An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local attacker to escalate privileges via the Program.exe component.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Terratec dmx_6fire USB - Unquoted Service Path2024-04-12 · local · windows_x86-64
Impact
An unquoted service path vulnerability in Terratec DMX_6Fire USB v.1.23.0.02 allows a local attacker to escalate privileges via the Program.exe component.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40kobbycyber/terratec-dmx-6fire-usb-unquoted-service-path-cve-2024-31804-70cced459202
- https://www.exploit-db.com/exploits/51977
- https://www.ired.team/offensive-security/privilege-escalation/unquoted-service-paths
- https://medium.com/%40kobbycyber/terratec-dmx-6fire-usb-unquoted-service-path-cve-2024-31804-70cced459202
- https://www.exploit-db.com/exploits/51977
- https://www.ired.team/offensive-security/privilege-escalation/unquoted-service-paths