What’s Vulnerable › Vulnerabilities

CVE-2023-2417: ks-soft Advanced Host Monitor rma_active.exe unquoted search path

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-29 · updated 2026-06-17
• Weakness: CWE-428

Description

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files (x86)\HostMonitor\RMA-Win\rma_active.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. Upgrading to version 12.60 is able to address this issue. It is recommended to upgrade the affected component. VDB-227714 is the identifier assigned to this vulnerability.

Affected products

• ks-soft Advanced Host Monitor: through 12.56

References

• http://packetstormsecurity.com/files/172105/Advanced-Host-Monitor-12.56-Unquoted-Service-Path.html
• https://vuldb.com/?ctiid.227714
• https://vuldb.com/?id.227714
• http://packetstormsecurity.com/files/172105/Advanced-Host-Monitor-12.56-Unquoted-Service-Path.html
• https://vuldb.com/?ctiid.227714
• https://vuldb.com/?id.227714

Get alerted when CVE-2023-2417 or the next vulnerability affects your stack