Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25271. PoCs published by ZwX.
AI-analyzed exploit summary This exploit demonstrates an unquoted service path vulnerability in NETGATE Data Backup 3.0.620, where the service 'NGDatBckpSrv' has a binary path containing spaces but lacks quotes, allowing potential privilege escalation via path manipulation.
Description
NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.
Exploits (1)
This exploit demonstrates an unquoted service path vulnerability in NETGATE Data Backup 3.0.620, where the service 'NGDatBckpSrv' has a binary path containing spaces but lacks quotes, allowing potential privilege escalation via path manipulation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H