VYPR
Medium severity6.7NVD Advisory· Published Apr 11, 2017· Updated May 13, 2026

CVE-2017-5873

CVE-2017-5873

Description

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Affected products

2
  • cpe:2.3:a:unisys:secure_partitioning:4.3.403:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:unisys:secure_partitioning:4.3.403:*:*:*:*:*:*:*
    • cpe:2.3:a:unisys:secure_partitioning:4.4.19:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.