Diskboss service 12.2.18 diskbsa.exe unquoted service path Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2021-05-24 |
Type : local |
Platform : windows
This exploit / vulnerability Diskboss service 12.2.18 diskbsa.exe unquoted service path is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
# Exploit Title: DiskBoss Service 12.2.18 - 'diskbsa.exe' Unquoted Service Path
# Discovery by: Erick Galindo
# Discovery Date: 2021-05-21
# Vendor Homepage: https://www.diskboss.com
# Software : https://www.diskboss.com/setups_x64/diskboss_setup_v12.2.18_x64.exe
# Tested Version: 12.2.18
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Windows 10 Pro x64 es
# Step to discover Unquoted Service Path:
C:\>wmic service get name, pathname, displayname, startmode | findstr "Auto" | findstr /i /v "C:\Windows\\" | findstr /i "DiskBoss" | findstr /i /v """
DiskBoss Service DiskBoss Service C:\Program Files\DiskBoss\bin\diskbsa.exe Auto