vendor:
ShadowMaker
by:
Thalia Nieto
7.8
CVSS
HIGH
Unquoted Service Path
426
CWE
Product Name: ShadowMaker
Affected Version From: 3.2
Affected Version To: 3.2
Patch Exists: NO
Related CWE: N/A
CPE: a:minitool:shadowmaker:3.2
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10
2021
MiniTool ShadowMaker 3.2 – ‘MTAgentService’ Unquoted Service Path
MiniTool ShadowMaker 3.2 is vulnerable to an unquoted service path vulnerability. This vulnerability can be exploited by an attacker to gain elevated privileges on the system. The vulnerability exists due to the MTAgentService service not being properly quoted. An attacker can exploit this vulnerability by placing malicious files in the same directory as the MTAgentService service executable. When the service is started, the malicious files will be executed with SYSTEM privileges.
Mitigation:
Ensure that all services are properly quoted and that no malicious files are placed in the same directory as the service executable.
