RATOC RAID Monitoring Manager for Windows Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability exists in RATOC RAID Monitoring Manager for Windows, prior to version 2.00.09.250820, due to the application registering a Windows service with an unquoted file path. This flaw allows users with write permissions on the root directory of the system drive to execute arbitrary code with SYSTEM privileges.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution with SYSTEM privileges.
Remediation
Users are advised to update RATOC RAID Monitoring Manager for Windows to version 2.00.09.250820 or later.
Added: Sep 5, 2025, 6:18 AM
Updated: Sep 5, 2025, 6:18 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
3.3remediation
7.7relevance
0.5threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.