Description
Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious executables and gain system-level access.
Problem types
Unquoted Search Path or Element
Product status
Credits
Héctor Gabriel Chimecatl Hernández
References
www.exploit-db.com/exploits/47605 (ExploitDB-47605)
www.alps.com/e/ (Official Product Homepage)
www.vulncheck.com/...phidmonitorservice-unquote-service-path (VulnCheck Advisory: Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path)