Fallos del tipo CWE-428

358 resultados

Caminho de busca sem aspas ou elemento não delimitado

Ocorre quando um aplicativo executa um programa ou carrega uma biblioteca usando um caminho sem aspas ou delimitação adequada, permitindo que espaços ou caracteres especiais no caminho sejam interpretados como separadores. Um atacante pode explorar isso colocando um executável malicioso em um diretório com nome parcial que coincida com a busca (ex: 'C:\Program Files\' interpretado como 'C:\Program\'), fazendo o sistema executar código não autorizado.

Ejemplo

Um serviço Windows tenta executar 'C:\Program Files\MeuApp\service.exe' mas o caminho não está entre aspas. O sistema busca primeiro por 'C:\Program.exe', depois 'C:\Program Files\MeuApp\service.exe'. Um atacante cria 'C:\Program.exe' malicioso e consegue executá-lo com privilégios do serviço.

Cómo mitigar

Sempre delimite caminhos com aspas duplas ao executar programas ou carregar bibliotecas dinâmicas. Use APIs que validem caminhos explicitamente, evite concatenação de strings para construir paths, e mantenha diretórios sensíveis com permissões restritivas para impedir criação de arquivos não autorizados.

CVE-2023-0887HIGHphjounin TFTPD64-SE tftpd64_svc.exe unquoted search pathEPSS 0.2%CVE-2023-29165MEDIUMUnquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to poteEPSS 0.2%CVE-2019-25261HIGHAnyDesk 5.4.0 - Unquoted Service PathEPSS 0.2%CVE-2024-1201HIGHPanteraSoft HDD Health search path or unquoted item vulnerabilityEPSS 0.2%CVE-2022-27592MEDIUMQVR Smart ClientEPSS 0.2%CVE-2026-97860HIGHYMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissionsEPSS 0.2%CVE-2020-37060HIGHAtomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service PathEPSS 0.2%CVE-2023-25075MEDIUMUnquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated EPSS 0.2%CVE-2026-81469HIGHDell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attackEPSS 0.2%CVE-2025-59888MEDIUMImproper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with EPSS 0.2%CVE-2023-2331HIGHBypassing hardening via Unquoted Service path vulnerabilityEPSS 0.2%CVE-2026-18755HIGHGV-ASManager DLL hijacking vulnerabilityEPSS 0.2%CVE-2022-0357MEDIUMImproper Quoting Path Issue in Bitdefender Total SecurityEPSS 0.2%CVE-2020-36953HIGHMiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service PathEPSS 0.2%CVE-2025-10199HIGHA local privilege escalation vulnerability exists in LizardBytes' Sunshine for WindowsEPSS 0.2%CVE-2025-24831MEDIUMLocal privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentEPSS 0.2%CVE-2023-24542MEDIUMUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user tEPSS 0.2%CVE-2023-54336HIGHMediconta 3.7.27 - 'servermedicontservice' Unquoted Service PathEPSS 0.2%CVE-2021-47739HIGHEpic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service PathEPSS 0.2%CVE-2026-26033HIGHUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which EPSS 0.2%