Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-53965. PoCs published by LiquidWorm.
AI-analyzed exploit summary This writeup describes an unquoted search path vulnerability in SOUND4 Server Service 4.1.102, which could allow local privilege escalation by exploiting the service's executable path. The vulnerability requires local access and the ability to place arbitrary code in the system root path.
Description
SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during service startup.
Exploits (1)
This writeup describes an unquoted search path vulnerability in SOUND4 Server Service 4.1.102, which could allow local privilege escalation by exploiting the service's executable path. The vulnerability requires local access and the ability to place arbitrary code in the system root path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H