Unrated severityNVD Advisory· Published Mar 16, 2023· Updated Feb 26, 2025

CVE-2023-24671

Description

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

Affected products

VX Search/VX Searchdescription
Vxsearch/Vx Searchllm-fuzzy
Range: <=14.7

Patches

Vulnerability mechanics

References

medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8aemitre
packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000