Description
Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brother | SAPSprint | 7.60 | — |
References
- ExploitDB-50061 exploit
- Official Product Homepage product
- VulnCheck Advisory: Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation third-party-advisory