CVE-2024-58288highCWE-428

Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%

probabilidad de explotación

0.4%top 68% de las CVE

explotación observada

noninguna fuente lo reporta

Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the unquoted binary path to execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

Genexus · Genexus Protection Server

Referencias

https://www.exploit-db.com/exploits/52065 https://www.genexus.com/en/developers/downloadcenter?data=;;https://www.genexus.com/es/https://www.vulncheck.com/advisories/genexus-protection-server-unquoted-service-path-privilege-escalation