Unquoted Search Path or Element in Toshiba products - CVE-2020-5569

Vulnerability identifier: #VU27021

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2020-5569

CWE-ID: CWE-428

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Toshiba

Affected software:
CANVIO PREMIUM 3TB HD-MB30TY
CANVIO PREMIUM 3TB HD-MA30TY
CANVIO PREMIUM 3TB HD-MB30TS
CANVIO PREMIUM 3TB HD-MA30TS
CANVIO PREMIUM 2TB HD-MB20TY
CANVIO PREMIUM 2TB HD-MA20TY
CANVIO PREMIUM 2TB HD-MB20TS
CANVIO PREMIUM 2TB HD-MA20TS
CANVIO PREMIUM 1TB HD-MB10TY
CANVIO PREMIUM 1TB HD-MA10TY
CANVIO PREMIUM 1TB HD-MB10TS
CANVIO PREMIUM 1TB HD-MA10TS
CANVIO SLIM 1TB HD-SB10TK
CANVIO SLIM 1TB HD-SB10TS
CANVIO SLIM 500GB HD-SB50GK
CANVIO SLIM 500GB HD-SA50GK
CANVIO SLIM 500GB HD-SB50GS
CANVIO SLIM 500GB HD-SA50GS
HDD Password tool

The vulnerability allows a local attacker to escalate privileges on the target system.

The vulnerability exists due to the affected software registers Windows services with unquoted file paths. When a registered path contains spaces, a local attacker can place a malicious executable on a certain path and execute it with the privilege of the Windows service. 

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://jvn.jp/en/jp/JVN13467854/index.html