Description
Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files (x86)\Brother\ directory to gain local system privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brother Industries | BRAdmin Professional | 3.75.0000 | — |
References
- ExploitDB-49671 exploit
- Brother Global Homepage product
- Brother Software Download Page product
- Vulnerability Technical Details technical-description
- VulnCheck Advisory: BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path third-party-advisory