Description
10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10-Strike | Bandwidth Monitor | 3.9 | — |
References
- ExploitDB-48591 exploit
- Vendor Homepage product
- VulnCheck Advisory: Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path third-party-advisory