What’s Vulnerable › Vulnerabilities
CVE-2017-7180
- Severity: high (CVSS 7.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-06-08 · updated 2026-06-17
- Weakness: CWE-428
Description
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.
Affected products
- Eduiq Net Monitor For Employees: through 5.3.4
References
Get alerted when CVE-2017-7180 or the next vulnerability affects your stack