Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in AnyDesk ausnutzen, um beliebigen Programmcode auszuführen.
Product
AnyDesk ist eine Software zur Fernsteuerung von Computern über das Internet.
Vulnerabilities 1
-
Medium 6.9
AnyDesk 9.0.1 Unquoted Service Path Privilege Escalation Vulnerability
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious exec…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2025-12-11
https://github.com/advisories/GHSA-4wh5-g47w-7vfc
-
VulnCheck Advisory vom 2025-12-11
https://www.vulncheck.com/advisories/anydesk-unquoted-service-path-privilege-escalation-vulnerability
-
PoC für v7.0.15
https://www.exploit-db.com/exploits/51968
-
PoC für v9.0.1
https://www.exploit-db.com/exploits/52258