ks-soft Advanced Host Monitor rma_active.exe unquoted search path
CVE-2023-2417

5.3MEDIUM

Key Information:

Vendor

Ks-soft

Vendor
CVE Published:
29 April 2023

What is CVE-2023-2417?

A vulnerability exists in ks-soft Advanced Host Monitor in versions up to 12.56, specifically in the file located at C:\Program Files (x86)\HostMonitor\RMA-Win\rma_active.exe. The lack of properly quoted paths can lead to potential exploitation through untrusted input, enabling local execution of arbitrary files. Users are strongly advised to upgrade to version 12.60 to mitigate this risk and reinforce the application's security posture. For further details, refer to the relevant resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Advanced Host Monitor 12.0

Advanced Host Monitor 12.1

Advanced Host Monitor 12.2

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

mrempy (VulDB User)
.