Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.
| Vendor | Product | Versions |
|---|---|---|
| netgate | netgate amiti antivirus | 23.0.305 |
Updated severity to HIGH, marked exploit as available, and provided a more detailed description of the vulnerability.
Initial creation
