Vulnerability in Yamaha Corporation YMS-VPN8

[ Description ]Official description

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• jvn.jp/en/jp/JVN30675482
• www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN30675482.html