What’s Vulnerable › Vulnerabilities

CVE-2023-24671

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-16 · updated 2026-06-17
• Weakness: CWE-428

Description

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

Affected products

• Vxsearch VX Search: 13.8, 14.7

References

• https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae
• https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html
• https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae
• https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html

Get alerted when CVE-2023-24671 or the next vulnerability affects your stack