Wiesemann & Theis: Multiple products prone to unquoted search path
Multiple Wiesemann & Theis software products are affected by a vulnerability through an unquoted search path in the Windows registry. A local attacker can execute arbitrary code and gain administrative privileges by inserting an executable file in the path of the affected product. Update A, 07.03.2024 Incorrect version numbers have been corrected.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-25552US | — | — | ||
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (1)
- Behoben
- Update Com Redirector Legacy external link to version 3.94 or higher (Art.No. 00102) - Update Com Redirector PnP external link to version 4.43 or higher (Art.No. 00111) - Update OPC-Server external link to version 4.89 or higher (Art.No. 00103)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan