CVE-2017-6005 Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially a...
HighCVSS 7.0
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| waves maxxaudio | = 1.1.6.0 | No fix listed |
References
- justpentest.blogspot.in third-party-advisory