CVE-2019-25261

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Unquoted Search Path or Element pada anydesk. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service executable locations, potentially gaining elevated system privileges.

Rincian

Terbit di NVD

3 Februari 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-428: Unquoted Search Path or Element

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/anydesk-unquoted-service-path advisory pihak ketiga
• https://www.exploit-db.com/exploits/47883 exploit
• http://anydesk.com product