CVE-2021-42563

2021-11-1220:48:49

mitre

www.cve.org

unquoted service path

ni service locator

windows

local user privilege escalation

AI Score

8.5

Confidence

High

EPSS

Percentile

5.1%

JSON

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.

References

www.ni.com/en-us/support/documentation/supplemental/21/unquoted-service-path-in-ni-service-locator.html