Description
Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netgate | Amiti Antivirus | 25.0.640 | — |
References
- ExploitDB-47747 exploit
- Vendor Homepage product
- VulnCheck Advisory: Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability third-party-advisory