CVE-2018-20341
High
Description
WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "" then the system will know where to find it. However if the path of where the application binary is located doesn't contain any quotes then Windows will try to find it and execute it inside every folder of this path until they reach the executable.
SeverityHigh
CVSS7.8
Exploit probability—
ProductWinmagic Securedoc Disk Encryption
PublishedApr 8, 2019
First seenApr 8, 2019
How to fix
Update
- winmagic securedoc_disk_encryption8.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winmagic securedoc_disk_encryption | v < 8.3 | 8.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.