JVN#35246979: ELECOM WAB-MAT registers its windows service executable with an unquoted file path

WAB-MAT provided by ELECOM CO.,LTD. is Access Point Management Tool for corporate users. WAB-MAT registers its windows service executable with an unquoted file path (CWE-428).

Impact

If a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• WAB-MAT Ver.5.0.0.8 and earlier