Description
Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netgate | NETGATE AMITI Antivirus | 23.0.305 | — |
References
- ExploitDB-40540 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation third-party-advisory