Description
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup.
Problem types
Unquoted Search Path or Element
Product status
Credits
Victor Mondragón
References
www.exploit-db.com/exploits/49586 (ExploitDB-49586)
www.softros.com/ (Vendor Homepage)
download.logonexpert.com/LogonExpertSetup64.msi (Software Download Link)
www.vulncheck.com/...rt-logonexpertsvc-unquoted-service-path (VulnCheck Advisory: LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path)