{"id":"CVE-2017-7180","aliases":["EUVD-2017-16218","GHSA-529v-m46p-q4jf"],"status":"published","title":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security...","description":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01051,"percentile":0.64548,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-428"],"published":"2017-06-08T12:00:00Z","modified":"2026-06-17T01:23:49Z","exploits":[{"source":"exploitdb","id":"EDB-42141","title":"Net Monitor for Employees Pro \u003c 5.3.4 - Unquoted Service Path Privilege Escalation","type":"local","platform":"windows","date":"2017-06-08","url":"https://www.exploit-db.com/exploits/42141"}],"products":[{"vendor":"eduiq","product":"net_monitor_for_employees"}],"references":[{"url":"https://www.exploit-db.com/exploits/42141/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7180"},{"url":"https://www.exploit-db.com/exploits/42141"},{"url":"https://github.com/advisories/GHSA-529v-m46p-q4jf"}],"sources":{"cve":[{"id":"CVE-2017-7180","description":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.","status":"published","published":"2017-06-08T12:00:00Z","modified":"2024-08-05T15:56:35.957Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16218","description":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.","status":"published","published":"2017-06-08T12:00:00Z","modified":"2024-08-05T15:56:35Z","updated_at":"2026-11-03T02:39:09.41676Z"}],"ghsa":[{"id":"GHSA-529v-m46p-q4jf","title":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security...","description":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.","status":"published","published":"2022-05-13T01:10:00Z","modified":"2025-04-20T03:39:36Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T15:01:47.375435Z"}],"nvd":[{"id":"CVE-2017-7180","description":"Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented \"Block applications\" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and thus the issue is not interpreted as a direct privilege escalation. However, the local attacker might have the goal of executing program.exe even though program.exe is a blocked application.","status":"published","published":"2017-06-08T12:29:00.173Z","modified":"2026-06-17T01:23:49.26Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:03:50.782497Z"}]}}