CVE-2016-20094

Name of the Vulnerable Software and Affected Versions AnyDesk version 2.5.0

Description An unquoted service path issue exists in the service installation, allowing local users to execute arbitrary code with SYSTEM privileges. This occurs when a service path contains spaces and is not enclosed in quotes, enabling attackers to place malicious executables in the system root path that run with elevated privileges during application startup or system reboot.

Recommendations Update AnyDesk version 2.5.0 to a newer version that fixes the unquoted service path. At the moment, there is no information about a newer version that contains a fix for this vulnerability.