Design/Logic Flaw

2022-03-0315:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the system level.

CPENameOperatorVersion
remote_desktop_commander_suite_agentlt4.8

CPE	Name	Operator	Version
	remote_desktop_commander_suite_agent	lt	4.8

References

hansesecure.de/2022/02/vulnerability-in-remote-desktop-commander-suite-agent/?lang=en

www.rdpsoft.com/uqspvuln/