CVE-2014-4634

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-12-30 · updated 2026-06-17

Description

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

Affected products

EMC AppSync all versions prior to 3.5: through 2.0
EMC Replication Manager: through 5.5.2; 5.0, 5.1, 5.2, 5.3, 5.4, 5.4.3 (+2)

References

http://archives.neohapsis.com/archives/bugtraq/2014-12/0170.html
http://archives.neohapsis.com/archives/bugtraq/2014-12/0170.html

Get alerted when CVE-2014-4634 or the next vulnerability affects your stack