← volver
CVE-2019-25288

Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path

CVSS 8.5 HIGHEPSS 0.2%CWE-428
Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges. Attackers can insert an executable file in the service path to run unauthorized code when the service restarts or the system reboots.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Wacom · Wacom WTabletService

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://www.exploit-db.com/exploits/47593https://www.vulncheck.com/advisories/wacom-wtabletservice-wtabletservicepro-unquoted-service-pathhttps://www.wacom.com