CVE-2019-25747

EIP tracks 1 public exploit for CVE-2019-25747. PoCs published by Samuel DiazL.

AI-analyzed exploit summary This is a technical writeup describing an unquoted service path vulnerability in Network Inventory Advisor 5.0.26.0. The service 'niaservice' is installed with an unquoted path, which could allow local privilege escalation if an attacker can place a malicious executable in a higher-level directory.

Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables in intermediate directories. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with LocalSystem privileges when the service starts or restarts.