CVE-2019-25292highCWE-428

CVE-2019-25292: falha de alta gravidade em Alps HID Monitor Service

Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path

Publicada em 06 fev 2026

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.2%

probabilidade de exploração

0.2%top 93% das CVEs

exploração observada

nãonenhuma fonte reporta

Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious executables and gain system-level access.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Alps · Alps HID Monitor Service

Referências

https://www.alps.com/e/https://www.exploit-db.com/exploits/47605 https://www.vulncheck.com/advisories/alps-hid-monitor-service-aphidmonitorservice-unquote-service-path