Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rhmf-4wxg-qfjv

Опубликовано: 05 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 7.8

Описание

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

EPSS

Процентиль: 6%
0.0002
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 7.8
nvd
3 месяца назад

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

EPSS

Процентиль: 6%
0.0002
Низкий

8.5 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-428