{"id":"CVE-2019-25269","state":"PUBLISHED","title":"Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability","description":"Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.","publishedAt":"2026-02-04T23:15:48.689Z","updatedAt":"2026-10-27T00:54:07.849Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Netgate Amiti Antivirus"],"affected":[{"vendor":"Netgate","product":"Amiti Antivirus","versions":[{"version":"25.0.640","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/47747","http://www.netgate.sk/","https://www.vulncheck.com/advisories/amiti-antivirus-unquoted-service-path-vulnerability"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:45:53.332Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/25xxx/CVE-2019-25269.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2019-25269","state":"PUBLISHED","datePublished":"2026-02-04T23:15:48.689Z","dateUpdated":"2026-10-27T00:54:07.849Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-06T16:07:08.525Z"},"containers":{"cna":{"title":"Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability","descriptions":[{"lang":"en","value":"Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations."}],"affected":[{"vendor":"Netgate","product":"Amiti Antivirus","versions":[{"version":"25.0.640","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/47747","name":"ExploitDB-47747","tags":["exploit"]},{"url":"http://www.netgate.sk/","name":"Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/amiti-antivirus-unquoted-service-path-vulnerability","name":"VulnCheck Advisory: Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","lang":"en","description":"Unquoted Search Path or Element","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-10-27T00:54:07.849Z"},"datePublic":"2019-12-04T00:00:00.000Z","credits":[{"lang":"en","value":"ZwX","type":"finder"}],"x_generator":{"engine":"vulncheck"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netgate:amiti_antivirus:25.0.640:*:*:*:*:*:*:*"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-06T20:30:08.739884Z","id":"CVE-2019-25269","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-06T20:30:16.582Z"}}]}}}