CVE-2019-25281: NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25281?
CVE-2019-25281 has a medium severity rating due to its potential for local exploitation and arbitrary code execution.
How do I fix CVE-2019-25281?
You can mitigate CVE-2019-25281 by ensuring all service paths in NCP Secure Entry Client 9.2 are properly quoted.
What versions of NCP Secure Entry Client are affected by CVE-2019-25281?
CVE-2019-25281 affects NCP Secure Entry Client version 9.2 and potentially earlier versions.
What are the potential consequences of exploiting CVE-2019-25281?
Exploitation of CVE-2019-25281 could allow an attacker to execute arbitrary code with the privileges of the affected service.
Can CVE-2019-25281 be exploited remotely?
CVE-2019-25281 is not a remote vulnerability and requires local access to the system for exploitation.