Skip to content
Threat Feed
Subscribe

Product

Iperius Remote 1.7.0

1 brief RSS
high advisory

CVE-2016-20089: Iperius Remote Unquoted Service Path Vulnerability

An unquoted service path vulnerability, CVE-2016-20089, in Iperius Remote version 1.7.0 allows a local attacker to execute arbitrary code with SYSTEM privileges by placing a malicious executable in a specific directory when the legitimate service path contains spaces, enabling privilege escalation upon service restart or system reboot.

Iperius Remote 1.7.0 privilege-escalation windows vulnerability unquoted-service-path
2r 1t 4i