Description
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cooler Master Technology | Cooler Master MasterPlus | 1.8.5 | — |
References
- ExploitDB-51159 exploit
- CoolerMaster MasterPlus Official Homepage product
- VulnCheck Advisory: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path third-party-advisory