Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9p4g-qfj4-pjvf

Опубликовано: 05 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

EPSS

Процентиль: 1%
0.00012
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 7.8
nvd
3 дня назад

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

CVSS3: 7.8
debian
3 дня назад

ProShow Producer 9.0.3797 contains an unquoted service path vulnerabil ...

EPSS

Процентиль: 1%
0.00012
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-428