Wiesemann & Theis: Multiple products prone to unquoted search path
Multiple Wiesemann & Theis software products are affected by a vulnerability through an unquoted search path in the Windows registry. A local attacker can execute arbitrary code and gain administrative privileges by inserting an executable file in the path of the affected product. Update A, 07.03.2024 Incorrect version numbers have been corrected.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-25552US | — | — | ||
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product. | ||||
references
External citations — patches, advisories, analysis.
remediations (1)
- Fixed
- Update Com Redirector Legacy external link to version 3.94 or higher (Art.No. 00102) - Update Com Redirector PnP external link to version 4.43 or higher (Art.No. 00111) - Update OPC-Server external link to version 4.89 or higher (Art.No. 00103)
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan