MegaTEC CMService Unquoted Service Path Vulnerability Allowing Privilege Escalation

A vulnerability exists in the CMService.exe service, which operates with SYSTEM privileges and features an unquoted service path. This flaw enables a local attacker with write access to the filesystem to place a malicious executable in the service path, potentially leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a local attacker to gain elevated rights on the system.

Remediation

Users can download the latest firmware versions addressing this vulnerability from the MegaTEC Software Download Center. Specific firmware files are available for different MegaTEC NetAgent 9 models.