CVE-2016-5793 Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
HighCVSS 8.8
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa active opc server | <= 2.4.18 | No fix listed |
References
- 93046 vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource