ks-soft Advanced Host Monitor rma_active.exe unquoted search path
CVE-2023-2417

5.3MEDIUM

Key Information:

Vendor: Ks-soft
Status: Advanced Host Monitor
Vendor: CVE Published:; 29 April 2023

What is CVE-2023-2417?

A vulnerability exists in ks-soft Advanced Host Monitor in versions up to 12.56, specifically in the file located at C:\Program Files (x86)\HostMonitor\RMA-Win\rma_active.exe. The lack of properly quoted paths can lead to potential exploitation through untrusted input, enabling local execution of arbitrary files. Users are strongly advised to upgrade to version 12.60 to mitigate this risk and reinforce the application's security posture. For further details, refer to the relevant resources.

Affected Version(s)

Advanced Host Monitor 12.0

Advanced Host Monitor 12.1

Advanced Host Monitor 12.2

References

https://vuldb.com/?id.227714

vdb-entry

https://vuldb.com/?ctiid.227714

signaturepermissions-required

http://packetstormsecurity.com/files/172105/Advanced-Host...

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 29, 2023
Vulnerability Reserved
Apr 28, 2023

Credit

mrempy (VulDB User)

CVE-2023-2417 Data

JSON