Lucene search
K

Configuration Tool 1.6.53 Unquoted Service Path

🗓️ 07 Mar 2021 00:00:00Reported by Brian RodriguezType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 217 Views

Configuration Tool 1.6.53 Unquoted Service Path vulnerability in OKI Local Port Manage

Code
`# Exploit Title: Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path  
# Discovery by: Brian Rodriguez  
# Date: 07-03-2021  
# Vendor Homepage: https://www.oki.com  
# Software Links: https://www.oki.com/mx/printing/support/drivers-and-utilities/?id=46226801&tab=drivers-and-utilities&productCategory=monochrome&sku=62442301&os=ab4&lang=ac6  
# Tested Version: 1.6.53  
# Vulnerability Type: Unquoted Service Path  
# Tested on: Windows 8.1 Pro 64 bits  
  
# Step to discover Unquoted Service Path:  
  
C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto"  
|findstr /i /v "c:\windows\\" |findstr /i /v """  
OKI Local Port Manager OpLclSrv C:\Program  
Files\Okidata\Common\extend3\portmgrsrv.exe Auto  
  
C:\>sc qc OpLclSrv [SC] QueryServiceConfig CORRECTO NOMBRE_SERVICIO:  
OpLclSrv TIPO: 10 WIN32_OWN_PROCESS TIPO_INICIO: 2 AUTO_START  
CONTROL_ERROR: 0 IGNORE NOMBRE_RUTA_BINARIO: C:\Program  
Files\Okidata\Common\extend3\portmgrsrv.exe GRUPO_ORDEN_CARGA: ETIQUETA: 0  
NOMBRE_MOSTRAR: OKI Local Port Manager DEPENDENCIAS:  
NOMBRE_INICIO_SERVICIO: LocalSystem  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation