Search Path or Unquoted Item Vulnerability Affects Faronics Deep Freeze Server Standard Versions 8.30.020.4627 and Earlier

CVE-2024-1618

What is CVE-2024-1618?

A search path vulnerability has been identified in Faronics Deep Freeze Server Standard, specifically affecting the DFServ.exe executable. This vulnerability allows an attacker with local user privileges to replace the legitimate DFServ.exe service file with a malicious version, ideally positioned in a higher priority directory. Consequently, when the service is initiated, the compromised executable is executed instead of the genuine file. This exploitation could grant the attacker the ability to execute arbitrary code, potentially resulting in unauthorized access to the system or disruption of the service's operation.

References