CVE-2024-58288highCWE-428

Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.4%

probabilidade de exploração

0.4%top 68% das CVEs

exploração observada

nãonenhuma fonte reporta

Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the unquoted binary path to execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

Genexus · Genexus Protection Server

Referências

https://www.exploit-db.com/exploits/52065 https://www.genexus.com/en/developers/downloadcenter?data=;;https://www.genexus.com/es/https://www.vulncheck.com/advisories/genexus-protection-server-unquoted-service-path-privilege-escalation