Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2022-50914

EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EaseUS EaseUS Data Recovery

  • 15.1.0.0affected

References