CVE-2019-25261: AnyDesk 5.4.0 - Unquoted Service Path
AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service executable locations, potentially gaining elevated system privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25261?
CVE-2019-25261 is considered a medium severity vulnerability due to the potential for local attackers to exploit it.
How do I fix CVE-2019-25261?
To fix CVE-2019-25261, you should update AnyDesk to the latest version that addresses the unquoted service path issue.
Who is affected by CVE-2019-25261?
Users of AnyDesk version 5.4.0 on Windows systems are affected by CVE-2019-25261.
What type of vulnerability is CVE-2019-25261?
CVE-2019-25261 is an unquoted service path vulnerability that can allow local attackers to execute arbitrary code.
Can CVE-2019-25261 be exploited remotely?
No, CVE-2019-25261 requires local access to the system for exploitation.