{"id":"CVE-2023-3438","aliases":["EUVD-2023-44102","GHSA-r7f6-rq55-mr8p"],"status":"published","title":"An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier...","description":"An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). \nThe misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00237,"percentile":0.14799,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2023-07-03T07:35:24Z","modified":"2026-06-17T06:14:04Z","products":[{"vendor":"trellix","product":"move"},{"vendor":"trellix","product":"trellix move"}],"references":[{"url":"https://kcm.trellix.com/corporate/index?page=content\u0026id=SB10404","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3438"},{"url":"https://github.com/advisories/GHSA-r7f6-rq55-mr8p"}],"sources":{"cve":[{"id":"CVE-2023-3438","description":"\nAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). \nThe misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.\n\n","status":"published","published":"2023-07-03T07:35:24.255Z","modified":"2024-10-25T13:07:01.819Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-44102","description":"\nAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). \nThe misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.\n\n","status":"published","published":"2023-07-03T07:35:24Z","modified":"2024-10-25T13:07:01Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:19.50919Z"}],"ghsa":[{"id":"GHSA-r7f6-rq55-mr8p","title":"\nAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier...","description":"\nAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). \nThe misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.\n\n","status":"published","published":"2023-07-03T09:30:18Z","modified":"2024-04-11T21:13:53Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:57:08.55794Z"}],"nvd":[{"id":"CVE-2023-3438","description":"\nAn unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe). \nThe misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.\n\n","status":"published","published":"2023-07-03T08:15:09.67Z","modified":"2026-06-17T06:14:04.25Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:08:14.715708Z"}]}}