CVE-2017-20218 | BDVDB-2026-320588 Detail
ServiioServiio PRO
Description#
Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by placing malicious executables in the system root path. Additionally, improper directory permissions with full access for the Users group allow authenticated users to replace the executable file with arbitrary binaries, enabling privilege escalation during service startup or system reboot.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-428 Unquoted Search Path or Element
References#
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5405.php
- https://blogs.securiteam.com/index.php/archives/3094
- https://www.exploit-db.com/exploits/41959/
- https://packetstormsecurity.com/files/142384
- https://cxsecurity.com/issue/WLB-2017050019
- https://exchange.xforce.ibmcloud.com/vulnerabilities/125644
- https://www.vulncheck.com/advisories/serviio-pro-local-privilege-escalation-via-unquoted-path
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.