Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-57227. PoCs published by Anish Feroz.
AI-analyzed exploit summary This is a technical writeup demonstrating an unquoted service path vulnerability in Kingo ROOT 1.5.8. The author provides evidence of the vulnerability by querying the service configuration and showing the unquoted path in the BINARY_PATH_NAME, which could allow local privilege escalation if an attacker plants a malicious executable in a path with spaces.
Description
An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder.
Exploits (1)
This is a technical writeup demonstrating an unquoted service path vulnerability in Kingo ROOT 1.5.8. The author provides evidence of the vulnerability by querying the service configuration and showing the unquoted path in the BINARY_PATH_NAME, which could allow local privilege escalation if an attacker plants a malicious executable in a path with spaces.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H