Axis Optimizer Unquoted Search Path Vulnerability Leading to Privilege Escalation on Windows

A vulnerability allowing privilege escalation has been identified in AXIS Optimizer versions through 5.5.18.0. This unquoted search path vulnerability could be exploited by an attacker with administrator rights on a local Windows machine, enabling them to write data into the AXIS Optimizer installation directory.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the Windows operating system.

Remediation

Users are advised to update AXIS Optimizer to version 5.6.0.0 or higher. The latest software can be downloaded from the Axis website. For further assistance, contact Axis Technical Support.