Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8745-x4ph-xhpc

Опубликовано: 25 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 6.7

Описание

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

EPSS

Процентиль: 4%
0.00017
Низкий

8.4 High

CVSS4

6.7 Medium

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 6.7
nvd
21 день назад

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

EPSS

Процентиль: 4%
0.00017
Низкий

8.4 High

CVSS4

6.7 Medium

CVSS3

Дефекты

CWE-428