Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE Alert: CVE-2019-25274 - Photodex - ProShow Producer - https://www.redpacketsecurity.com/cve-alert-cve-2019-25274-photodex-proshow-producer/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25274 #photodex #proshow-producer
Post summary
The tweet announces a CVE alert for Photodex ProShow Producer, but does not provide technical details, exploitation information, or mitigation guidance.
CVE-2019-25274 ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code.… https://www.cve.org/CVERecord?id=CVE-2019-25274
Post summary
The post announces CVE-2019-25274, an unquoted service path vulnerability in ProShow Producer 9.0.3797’s ScsiAccess service that could let local attackers execute arbitrary code.