Description
Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alps | device Controller | 8.1202.1711.04 | — |
References
- ExploitDB-47637 exploit
- Official Alps Homepage product
- VulnCheck Advisory: Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path third-party-advisory