Falhas do tipo CWE-428

358 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2021-47868HIGHWIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service PathEPSS 0.2%CVE-2020-36957HIGHPDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service PathEPSS 0.2%CVE-2021-47864HIGHOSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service PathEPSS 0.2%CVE-2019-25305HIGHJumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service PathEPSS 0.2%CVE-2021-47884HIGHConfiguration Tool 1.6.53 - 'OpLclSrv' Unquoted Service PathEPSS 0.2%CVE-2025-5191HIGHUnquoted Search Path Vulnerability in the Utility for Industrial Computers (Windows)EPSS 0.1%CVE-2025-13433HIGHMuse Group MuseHub Windows Service Muse.Updater.exe unquoted search pathEPSS 0.1%CVE-2026-25866HIGHMobaXterm < 26.1 Notepad++ Unquoted Service PathEPSS 0.1%CVE-2022-4429MEDIUMAvira Security for Windows - Denial of ServiceEPSS 0.1%CVE-2020-24682HIGHAutomation Studio and PVI Multiple unquoted service path vulnerabilitiesEPSS 0.1%CVE-2025-9818MEDIUMVulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management applicationEPSS 0.1%CVE-2020-36903HIGHSelea CarPlateServer 4.0.1.6 Local Privilege Escalation via Unquoted Service PathEPSS 0.1%CVE-2022-50688HIGHCobian Backup Gravity 11.2.0.582 Unquoted Service Path Privilege EscalationEPSS 0.1%CVE-2023-54338HIGHTftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service PathEPSS 0.1%CVE-2017-20218HIGHServiio PRO 1.8 Local Privilege Escalation via Unquoted PathEPSS 0.1%CVE-2020-37058HIGHAndrea ST Filters Service 1.0.64.7 - Unquoted service pathEPSS 0.1%CVE-2021-47890HIGHLogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service PathEPSS 0.1%CVE-2021-47896HIGHPDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service PathEPSS 0.1%CVE-2023-53912HIGHUSB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege EscalationEPSS 0.1%CVE-2026-8864HIGHHP Fan Control App – Potential Escalation of PrivilegeEPSS 0.1%