CVE-2023-3438
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
An unquoted Windows search path vulnerability existed in the install service of MOVE 4.10.x and earlier versions. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path, leading to privilege escalation and the ability to stop antimalware services.
Risk Assessment
The organization may be exposed to privilege escalation by local users, potentially leading to serious security breaches, including the disruption of antivirus protection.
Recommendation
It is recommended to fix the service configuration to use quoted paths and to conduct an audit of local user permissions.
Original NVD description (English source)
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.