Fallos del tipo CWE-428

356 resultados

Caminho de busca sem aspas ou elemento não delimitado

Ocorre quando um aplicativo executa um programa ou carrega uma biblioteca usando um caminho sem aspas ou delimitação adequada, permitindo que espaços ou caracteres especiais no caminho sejam interpretados como separadores. Um atacante pode explorar isso colocando um executável malicioso em um diretório com nome parcial que coincida com a busca (ex: 'C:\Program Files\' interpretado como 'C:\Program\'), fazendo o sistema executar código não autorizado.

Ejemplo

Um serviço Windows tenta executar 'C:\Program Files\MeuApp\service.exe' mas o caminho não está entre aspas. O sistema busca primeiro por 'C:\Program.exe', depois 'C:\Program Files\MeuApp\service.exe'. Um atacante cria 'C:\Program.exe' malicioso e consegue executá-lo com privilégios do serviço.

Cómo mitigar

Sempre delimite caminhos com aspas duplas ao executar programas ou carregar bibliotecas dinâmicas. Use APIs que validem caminhos explicitamente, evite concatenação de strings para construir paths, e mantenha diretórios sensíveis com permissões restritivas para impedir criação de arquivos não autorizados.

CVE-2023-25075MEDIUMUnquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated EPSS 0.2%CVE-2026-33253HIGHSANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on tEPSS 0.2%CVE-2025-59888MEDIUMImproper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with EPSS 0.2%CVE-2023-2331HIGHBypassing hardening via Unquoted Service path vulnerabilityEPSS 0.2%CVE-2025-61865HIGHMultiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the wEPSS 0.2%CVE-2022-0357MEDIUMImproper Quoting Path Issue in Bitdefender Total SecurityEPSS 0.2%CVE-2025-24831MEDIUMLocal privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentEPSS 0.2%CVE-2023-24542MEDIUMUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user tEPSS 0.2%CVE-2021-47739HIGHEpic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service PathEPSS 0.2%CVE-2025-10199HIGHA local privilege escalation vulnerability exists in LizardBytes' Sunshine for WindowsEPSS 0.2%CVE-2025-71326HIGHAVAST Antivirus 25.11 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2023-54336HIGHMediconta 3.7.27 - 'servermedicontservice' Unquoted Service PathEPSS 0.2%CVE-2024-22437HIGHHPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of PrivilegeEPSS 0.2%CVE-2024-5402MEDIUMMint Workbench I Unquoted Service Path EnumerationEPSS 0.2%CVE-2023-24575HIGH Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulneraEPSS 0.2%CVE-2025-59307HIGHRAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on theEPSS 0.2%CVE-2026-26033HIGHUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which EPSS 0.2%CVE-2020-36953HIGHMiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service PathEPSS 0.2%CVE-2020-36979HIGHAtheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service PathEPSS 0.2%CVE-2021-47825HIGHAcer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service PathEPSS 0.2%