CVE-2016-5793

CVE-2016-5793 describes an unquoted Windows search/path vulnerability in Moxa Active OPC Server prior to 2.4.19 that allows local privilege escalation by placing a Trojan horse executable in the system drive. The root cause is an unquoted service path; exploitation is local, requires credentials,...

Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability

OVERVIEW Independent researcher Zhou Yu has identified an unquoted service path escalation vulnerability in Moxa’s Active OPC Server application. Moxa has produced a new version to mitigate this vulnerability. Zhou Yu has tested the new version to validate that it resolves the vulnerability...