[CVE-2022-50971] Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that …

Descripción técnica

Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Malwarebytes — Malwarebytes

Debilidades (CWE)

CWE-428

Fuente oficial

Publicado en NIST NVD.