CVE-2016-20058 Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation
HighCVSS 8.5
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| NETGATE AMITI Antivirus | = 23.0.305 | No fix listed |
| Netgate Amiti Antivirus | <= 23.0.305 | No fix listed |
References
- ExploitDB-40540 exploit vdb-entry
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation third-party-advisory