CVE-2026-33253
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
6.7 / 10
Vector String
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-428
Source
NVD
Vendor
SANYO DENKI CO., LTD.
Product
SANUPS SOFTWARE STANDALONE, SANUPS SOFTWARE
Discussion (0)
Add Comment
No comments yet. Be the first!