CVE-2016-5793

CVE-2016-5793 describes an unquoted Windows search/path vulnerability in Moxa Active OPC Server prior to 2.4.19 that allows local privilege escalation by placing a Trojan horse executable in the system drive. The root cause is an unquoted service path; exploitation is local, requires credentials,...