CVE-2019-7590CWE-428

exacqVision Server Unquoted Service Path

Medium · published July 19, 2019

CVSS v3.0
6.7
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00825 · 57.0th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2019-07-19T20:56Z
EPSS history
Timeline
  • 19 JUL 20:56Z
    exacqVision Server Unquoted Service Path
    cvelistv5