CVE-2023-53912CWE-428

USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation

High · published December 17, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious executables and escalate privileges on Windows systems.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2025-12-17T22:44Z
EPSS history
Timeline
  • 17 DEC 22:44Z
    USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation
    cvelistv5