PT-2025-50742

CVE-2024-58288

·

Published

2025-12-11

·

Updated

2026-10-02

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Genexus Protection Server version 9.7.2.10
Description The Genexus Protection Server software contains a flaw due to an unquoted service path in the configuration of the protsrvservice Windows service. This allows attackers to potentially execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.
Recommendations Ensure the service path for the protsrvservice Windows service is properly quoted to prevent exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-428: Unquoted Search Path or Element
Related identifiers
CVE-2024-58288
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com