PT-2026-3179 · Unknown · Disksorter Enterprise
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Disk Sorter Enterprise version 13.6.12
Description
Disk Sorter Enterprise 13.6.12 has a security issue related to an unquoted service path in its Windows service configuration. This allows local attackers to potentially execute arbitrary code. The vulnerable path is located at 'C:Program FilesDisk Sorter Enterprisebindisksrs.exe', which can be exploited to inject malicious executables and escalate privileges.
Recommendations
Ensure the service path is enclosed in quotes during the installation or configuration of Disk Sorter Enterprise 13.6.12.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Disksorter Enterprise