CVE-2024-58315

Katalog CVE

CVSS 7.8 · High EPSS 0,23%

Kerentanan Unquoted Search Path or Element pada tosibox key. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.

Rincian

Terbit di NVD

30 Desember 2025

Terakhir diubah

29 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-428: Unquoted Search Path or Element

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://packetstormsecurity.com/files/177260/ advisory pihak ketiga
• https://www.vulncheck.com/advisories/tosibox-key-service-local-privilege-escalation-via-unquoted-service-path advisory pihak ketiga
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5812.php exploit · advisory pihak ketiga
• https://www.tosi.net/ product