Estimated CVSS 3.1 Base Score:
Active Webcam 115 Unquoted Service Path: Analysis, Risk, and Patch Verification
If you are currently experiencing this issue, I can help you by: Providing the exact to edit. Drafting a PowerShell script to audit your system. Let me know which you'd prefer! Share public link
Active Webcam is a popular video monitoring and surveillance software package. Version 115 (and earlier builds) shipped with a flaw where its background monitoring service wrapper was registered in the Windows Registry without enclosing quotes around the absolute executable path. Technical Root Cause
The service can be used to launch ransomware or trojans.
C:\Program.exe (with Files\Active Webcam\webcam.exe as an argument)
C:\Program Files\Active WebCam\webcam.exe