Falhas do tipo CWE-428

358 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2022-50917HIGHProtonVPN 1.26.0 - Unquoted Service PathEPSS 0.2%CVE-2025-0035HIGHUnquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbiEPSS 0.2%CVE-2024-4031MEDIUMMEVO WEBCAM APP Windows Unquoted Service Path VulnerabilityEPSS 0.2%CVE-2023-54331HIGHOutline 1.6.0 - Unquoted Service PathEPSS 0.2%CVE-2021-47809HIGHDisk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterprise' Unquoted Service PathEPSS 0.2%CVE-2021-47792HIGHRemote Mouse 4.002 - Unquoted Service PathEPSS 0.2%CVE-2021-47807HIGHSync Breeze 13.6.18 - 'Multiple' Unquoted Service PathEPSS 0.2%CVE-2022-50971HIGHMalwarebytes 4.5 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2022-33920HIGHDell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this EPSS 0.2%CVE-2022-50914HIGHEaseUS Data Recovery - 'ensserver.exe' Unquoted Service PathEPSS 0.2%CVE-2020-37100HIGHSync Breeze Enterprise 12.4.18 - Unquoted Service PathEPSS 0.2%CVE-2022-50921HIGHWOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service PathEPSS 0.2%CVE-2022-50928HIGHBluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service PathEPSS 0.2%CVE-2022-35292—In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to EPSS 0.2%CVE-2023-53984HIGHHotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service PathEPSS 0.2%CVE-2024-31226MEDIUMSunshine's unquoted executable path could lead to hijacked execution flowEPSS 0.2%CVE-2022-50924HIGHPrivate Internet Access 3.3 - 'pia-service' Unquoted Service PathEPSS 0.2%CVE-2022-4258HIGHHima: Unquoted path vulnerabilities in HIMA PC based SoftwareEPSS 0.2%CVE-2023-3842HIGHPointware EasyInventory Easy2W.exe unquoted search pathEPSS 0.2%CVE-2019-25276HIGHStudio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service PathEPSS 0.2%