PT-2026-50914 · Network Inventory Advisor · Network Inventory Advisor

Samuel Diazl · Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2019-25747

Mitre

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing malicious executables in intermediate directories. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with LocalSystem privileges when the service starts or restarts.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-25747

Produtos afetados

Network Inventory Advisor

Referências · 5

• 🔥 https://exploit-db.com/exploits/47584 · Exploit
• https://network-inventory-advisor.com/download.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25747 · Nota de Segurança
• https://network-inventory-advisor.com · Nota
• https://vulncheck.com/advisories/network-inventory-advisor-unquoted-service-path-privilege-escalation · Nota