Description
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the service path and execute it with LocalSystem privileges when the service restarts or the system reboots.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Syncplify | Syncplify.me Server! | 5.0.37 | — |
References
- ExploitDB-49009 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation third-party-advisory