vendor:
AnyDesk
by:
Milad Karimi (Ex3ptionaL)
6.1
CVSS
HIGH
Unquoted Service Path
428
CWE
Product Name: AnyDesk
Affected Version From: 7.0.15
Affected Version To: 7.0.15
Patch Exists: NO
Related CWE:
CPE: a:anydesk:anydesk:7.0.15
Platforms Tested: Windows 10 Pro x64
2024
AnyDesk 7.0.15 – Unquoted Service Path
AnyDesk version 7.0.15 installs a service with an unquoted service path that runs with SYSTEM privileges. This vulnerability could be exploited by an authorized non-privileged local user to execute arbitrary code with elevated privileges on the system.
Mitigation:
To mitigate this vulnerability, the service path for AnyDesk should be quoted properly. Ensure that all services have properly quoted paths to prevent unauthorized code execution.
