Netkids Imark
Monthly
Privilege escalation to SYSTEM in NetKids iMark (all versions through V5.2.5.0) is achievable by authenticated local attackers exploiting an unquoted Windows service executable path. Because the service path contains spaces but lacks surrounding quotation marks, Windows' path resolution logic will execute an attacker-placed binary at an intermediate path before reaching the legitimate service binary. JPCERT/CC has issued an advisory (JVN#28045338) and the vendor has published remediation PDF guidance; no public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Privilege escalation to SYSTEM in NetKids iMark, a parental control product by Integrated Systems Technologies, Inc. (Japan), allows an authenticated local attacker to execute arbitrary code at the highest privilege level by exploiting an uncontrolled DLL search path. The JPCERT advisory (JVN#28045338) documents two related weaknesses: DLL hijacking via improper search path handling (CWE-427) and a secondary unquoted service path issue, both enabling privilege escalation on affected Windows hosts. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation to SYSTEM in NetKids iMark (all versions through V5.2.5.0) is achievable by authenticated local attackers exploiting an unquoted Windows service executable path. Because the service path contains spaces but lacks surrounding quotation marks, Windows' path resolution logic will execute an attacker-placed binary at an intermediate path before reaching the legitimate service binary. JPCERT/CC has issued an advisory (JVN#28045338) and the vendor has published remediation PDF guidance; no public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Privilege escalation to SYSTEM in NetKids iMark, a parental control product by Integrated Systems Technologies, Inc. (Japan), allows an authenticated local attacker to execute arbitrary code at the highest privilege level by exploiting an uncontrolled DLL search path. The JPCERT advisory (JVN#28045338) documents two related weaknesses: DLL hijacking via improper search path handling (CWE-427) and a secondary unquoted service path issue, both enabling privilege escalation on affected Windows hosts. No public exploit code or CISA KEV listing has been identified at time of analysis.