CVE-2019-25281

HIGH

NCP Secure Entry Client 9.2 - Code Injection

Title source: llm

Description

NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.

Exploits (1)

exploitdb WRITEUP

by Akif Mohamed Ik · textlocalwindows

https://www.exploit-db.com/exploits/47668

View Code ZIP pw:eip

References (3)

[Various Sources] http://software.ncp-e.com/

[Third Party Advisory] https://www.vulncheck.com/advisories/ncpsecureentryclient-unquoted-service-paths

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/47668

Scores

CVSS v3 7.8

EPSS 0.0001

EPSS Percentile 0.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-428

Status draft

Timeline

Published Feb 05, 2026

Tracked Since Feb 18, 2026