CVE-2019-25281
NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
ncp-e · NCP_Secure_Entry_Client¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →