Unknown · Network Inventory Advisor · CVE-2019-25747
**Name of the Vulnerable Software and Affected Versions**
Network Inventory Advisor version 5.0.26.0
**Description**
The `niaservice` service is installed with an unquoted binary path. This configuration allows local attackers to escalate privileges by placing malicious executables in intermediate directories, enabling the execution of arbitrary code with LocalSystem privileges whenever the service starts or restarts.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.