CVE-2023-3438

CVSS V2 None CVSS V3 None

Description

An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.

Overview

CVE ID
CVE-2023-3438

Assigner
trellix

Vulnerability Status
PUBLISHED

Published Version
2023-07-03T07:35:24.255Z

Last Modified Date
2023-07-03T07:35:24.255Z

Weakness Enumerations

CWE	URL
CWE-428	http://cwe.mitre.org/data/definitions/428.html

References

Reference URL	Reference Tags
https://kcm.trellix.com/corporate/index?page=content&id=SB10404

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3438
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3438

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:48:02				Added to TrackCVE