CVE-2019-25273CWE-428

Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path

High · published February 4, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

⚠️ A local attacker can seize control simply by manipulating an unquoted service path! This vulnerability in Easy-Hide-IP 5.0.0.3 is like a delivery driver misreading an address—you're opening the door to all sorts of trouble. 🔥 Think of the unquoted service path like a restaurant order that gets prepared without checking the item number. If the kitchen takes a wild guess, they could serve up a surprise dish that was never on the menu, allowing a crafty attacker to inject their own malicious code instead! If exploited, this vulnerability could allow an attacker to run arbitrary code with elevated privileges, potentially gaining full control of the system. This could lead to unauthorized data access, manipulation, or even a complete system takeover – absolutely devastating!

Put simply

Think of the unquoted service path like a restaurant order that gets prepared without checking the item number. If the kitchen takes a wild guess, they could serve up a surprise dish that was never on the menu, allowing a crafty attacker to inject their own malicious code instead! The unquoted service path vulnerability in Easy-Hide-IP allows local attackers to execute arbitrary code by exploiting the improperly formatted path in 'C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe'. When the executable is launched, the service may inadvertently run malicious files that are placed in the incorrect directory.

What to do

If exploited, this vulnerability could allow an attacker to run arbitrary code with elevated privileges, potentially gaining full control of the system. This could lead to unauthorized data access, manipulation, or even a complete system takeover – absolutely devastating! To remediate this, immediately adjust the service path to include quotes and ensure it points to a valid executable. Check for any unauthorized files in the directory and consider updating to the latest version if available to patch the vulnerability. Additionally, run regular audits to keep your environment secure. You've got this! Follow these steps and you'll have your defenses fortified in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-04T23:15Z
EPSS history
Timeline
  • 04 FEB 23:15Z
    Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path
    cvelistv5