Description
Multiple Roboticsware products provided by Roboticsware PTE. LTD. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Roboticsware PTE | FA-Panel6 | Rev17 and earlier | — |
| Roboticsware PTE | BA-Panel6 | Rev17 and earlier | — |
| Roboticsware PTE | PA-Panel6 | Rev17 and earlier | — |
| Roboticsware PTE | FA-Server6 | Rev17 and earlier | — |