CVE-2023-3438CWE-428

An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe)

Medium · published July 3, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe).

The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2023-07-03T07:35Z
EPSS history
Timeline
  • 03 JUL 07:35Z
    An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe)
    cvelistv5