CVE-2019-25269

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.

Score

CVSS 4.0 8.5 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-02-05

Last modified

2026-10-27

Weaknesses

CWE-428

Affected products

• Amiti Antivirus (Netgate)

References

• http://www.netgate.sk/
• https://www.exploit-db.com/exploits/47747
• https://www.vulncheck.com/advisories/amiti-antivirus-unquoted-service-path-vulnerability