CVE-2017-6005

{"id": "CVE-2017-6005", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "published": "2017-07-26T08:29:00.663", "references": [{"url": "http://justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Waves MaxxAudio, as installed on Dell laptops, adds a \"WavesSysSvc\" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system."}, {"lang": "es", "value": "Waves MaxxAudio, tal como es instalado en laptops Dell, agrega un servicio de Windows \"WavesSysSvc\" con la versi\u00f3n de archivo 1.1.6.0. Este servicio tiene una vulnerabilidad conocida como ruta de servicio sin entrecomillar. Esto podr\u00eda potencialmente permitir a un usuario local autorizado pero no privilegiado ejecutar c\u00f3digo arbitrario con privilegios elevados en el sistema."}], "lastModified": "2024-11-21T03:28:53.003", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:waves:maxxaudio:1.1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A825008D-B9FB-439D-92A7-A63A5779C9C6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}