CVE-2019-25304 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with eleva…
High CVSS: 8.5

CVE-2019-25304

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\ISS\SecurOS\ to insert malicious code that would execute with system-level permissions during service startup.
Vendor
-
Product
-
CWE
CWE-428
Yayın Tarihi
2026-02-06 17:16:11
Güncelleme
2026-02-06 21:57:22
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-428 HIGH 2026

Referanslar

https://www.exploit-db.com/exploits/47556 https://www.issivs.com https://www.issivs.com/product-detail/secure-os-enterprise/ https://www.vulncheck.com/advisories/intelligent-security-system-securos-enterprise-securosctrlservice-unquoted-service-path