Falhas do tipo CWE-428

356 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2021-47826HIGHAcer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service PathEPSS 0.2%CVE-2025-57699HIGHWestern Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user wEPSS 0.2%CVE-2025-12286HIGHVeePN AVService avservice.exe unquoted search pathEPSS 0.2%CVE-2016-20086HIGHVembu StoreGrid 4.0 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2025-61871HIGHNAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on tEPSS 0.2%CVE-2016-20085HIGHRealtek High Definition Audio Driver 6.0.1.6730 Privilege EscalationEPSS 0.2%CVE-2024-57276HIGHIn Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configEPSS 0.2%CVE-2019-25285HIGHAlps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service PathEPSS 0.2%CVE-2023-2685HIGHUnquoted Service Path in ABB AO-OPCEPSS 0.2%CVE-2019-25283HIGHShrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service PathEPSS 0.2%CVE-2019-25281HIGHNCP_Secure_Entry_Client 9.2 - Unquoted Service PathsEPSS 0.2%CVE-2020-36986HIGHPrey 1.9.6 - "CronService" Unquoted Service PathEPSS 0.2%CVE-2020-36984HIGHEPSON 1.124 - 'seksmdb.exe' Unquoted Service PathEPSS 0.2%CVE-2026-77827HIGHMaono Link local privilege escalationEPSS 0.2%CVE-2020-36985HIGHIP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service PathEPSS 0.2%CVE-2020-36992HIGHNord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service PathEPSS 0.2%CVE-2020-36989HIGHForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service PathEPSS 0.2%CVE-2024-2747HIGHCWE-428: Unquoted search path or element vulnerability exists in Easergy Studio, which could cause privilege escalation when a valid user reEPSS 0.2%CVE-2020-36990HIGHInput Director 1.4.3 - 'Input Director' Unquoted Service PathEPSS 0.2%CVE-2020-36991HIGHShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service PathEPSS 0.2%