CVE-2019-25747

Name of the Vulnerable Software and Affected Versions Network Inventory Advisor version 5.0.26.0

Description The niaservice service is installed with an unquoted binary path. This configuration allows local attackers to escalate privileges by placing malicious executables in intermediate directories, enabling the execution of arbitrary code with LocalSystem privileges whenever the service starts or restarts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.