Description
TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe' to inject malicious executables and gain elevated system privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenaxsoft | TexasSoft CyberPlanet | 6.4.131 | — |
References
- ExploitDB-47724 exploit
- Vendor Homepage product
- VulnCheck Advisory: TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path third-party-advisory