Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-3438

An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.

Published

2023-07-03T08:15:09.670

Last Modified

2024-11-21T08:17:16.007

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-428
  • Type: Primary
    CWE-428
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application trellix move ≤ 4.10.0 Yes
References