Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-53954. PoCs published by Birkan ALHAN.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in ActFax 10.10, where an attacker with write privileges to specific directories can escalate privileges by injecting a malicious executable. The document provides discovery methods and exploitation steps but does not include functional exploit code.
Description
ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to gain elevated system access when the service restarts.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in ActFax 10.10, where an attacker with write privileges to specific directories can escalate privileges by injecting a malicious executable. The document provides discovery methods and exploitation steps but does not include functional exploit code.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N