CVE-2017-7180

Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.

CVSS v3.1

7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

1.05% chance of exploitation in the next 30 days, 62th percentile

Published

2017-06-08

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42141

References

• CVE Record
• NVD entry

Related

• CVE-2017-7178
• CVE-2017-7183
• CVE-2017-7175
• CVE-2017-7184
• CVE-2017-7154
• CVE-2017-7185