Falhas do tipo CWE-428

358 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2021-47828HIGHBOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service PathEPSS 0.2%CVE-2020-37059HIGHPopcorn Time 6.2 - 'Update service' Unquoted Service PathEPSS 0.2%CVE-2025-0884HIGHPrivilege Escalation vulnerability has been discovered in OpenText™ Service Manager.EPSS 0.2%CVE-2022-50930HIGHEmerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service PathEPSS 0.2%CVE-2025-41359HIGHMultiple vulnerabilities in Small HTTP server by SmallsrvEPSS 0.2%CVE-2022-50904HIGHWondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service PathEPSS 0.2%CVE-2020-37253HIGHWinstep 18.06.0096 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2023-53946HIGHArcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2022-50913HIGHTCQ - 'ITeCProteccioAppServer.exe' Unquoted Service PathEPSS 0.2%CVE-2022-50920HIGHSandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service PathEPSS 0.2%CVE-2023-53947HIGHOCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2016-20056HIGHSpy Emergency build 23.0.205 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2025-66271HIGHClone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file path. A user with the write permission on thEPSS 0.2%CVE-2019-25231HIGHdevolo dLAN Cockpit 4.3.1 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2016-20060HIGHHotspot Shield 6.0.3 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2025-9043MEDIUMThe service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploitEPSS 0.2%CVE-2019-25304HIGHIntelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service PathEPSS 0.2%CVE-2019-25266HIGHWondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service PathEPSS 0.2%CVE-2019-25293HIGHBlue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service PathEPSS 0.2%CVE-2021-47869HIGHBRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service PathEPSS 0.2%