Description
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.
Related CPE's
Could not find any relations
References
CVSS impact metrics
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 · Medium
Information
Source identifier
Vulnerability status
Deferred
Published
2026-10-29T12:17:14.577Z
18 hours agoLast modified
2026-10-29T15:45:15.310Z
14 hours ago