CVE-2017-6005

HIGH 7.0CVE-2017-6005 · Published 26/07/2017 · updated 17/06/2026

In short

CVE-2017-6005 is a HIGH (CVSS 7.0) vulnerability affecting maxxaudio (waves).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
maxxaudio waves	`= 1.1.6.0`	No fix yet

Description

Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.

References

justpentest.blogspot.in/2017/07/dell-unquoted-service-path-local.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free