Flexsense DiskBoss Service Unquoted Service Path Vulnerability
Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service name in the 'sc qc' command, allowing them to execute arbitrary system commands.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DiskBoss
Vendor
Flexsense
Product
DiskBoss
Platforms
Unknown
Default status
unaffected
DiskBoss · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Pro
Vendor
Flexsense
Product
DiskBoss Pro
Platforms
Unknown
Default status
unaffected
DiskBoss Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Ultimate
Vendor
Flexsense
Product
DiskBoss Ultimate
Platforms
Unknown
Default status
unaffected
DiskBoss Ultimate · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Pro
Vendor
Flexsense
Product
DiskBoss Pro
Platforms
Unknown
Default status
unaffected
DiskBoss Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Ultimate
Vendor
Flexsense
Product
DiskBoss Ultimate
Platforms
Unknown
Default status
unaffected
DiskBoss Ultimate · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Server
Vendor
Flexsense
Product
DiskBoss Server
Platforms
Unknown
Default status
unaffected
DiskBoss Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.7.28
affected
Unavailable
Unavailable
Unavailable
None listed
DiskBoss Enterprise
Vendor
Flexsense
Product
DiskBoss Enterprise
Platforms
Unknown
Default status
unaffected
DiskBoss Enterprise · Scoped product and version facts