Description
ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code with elevated system privileges. Attackers can insert a malicious executable in the service path to gain elevated access during service restart or system reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ITEC | TCQ | Unknown | — |
References
- ExploitDB-50902 exploit
- Vendor Homepage product
- VulnCheck Advisory: TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path third-party-advisory