CVE-2023-54353

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executables in unquoted path directories. Attackers with write access to C:\ or subdirectories like C:\Program Files (x86)\Personify\ can place a malicious Program.exe or PsyFrameGrabberService.exe file that executes with LocalSystem privileges when the service starts automatically at boot.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://personifyinc.com/
https://personifyinc.com/download/chromacam
https://www.exploit-db.com/exploits/51210
https://www.vulncheck.com/advisories/chromacam-unquoted-service-path-privilege-escalation

Configurations

No configuration.

History

26 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Chromacam 4.0.3.0 contiene una vulnerabilidad de ruta de servicio sin comillas en el PsyFrameGrabberService que permite a atacantes locales ejecutar código arbitrario al colocar ejecutables maliciosos en directorios de ruta sin comillas. Atacantes con acceso de escritura a C:\ o subdirectorios como C:\Program Files (x86)\Personify\ pueden colocar un archivo Program.exe o PsyFrameGrabberService.exe malicioso que se ejecuta con privilegios de LocalSystem cuando el servicio se inicia automáticamente al arrancar.

Information

Published : 2026-06-19 15:16

Updated : 2026-09-26 23:10

NVD link : CVE-2023-54353

Mitre link : CVE-2023-54353

CVE.ORG link : CVE-2023-54353

JSON object : View

Products Affected

No product.

CWE

CWE-428

Unquoted Search Path or Element

{"id": "CVE-2023-54353", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-54353", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-23T02:08:02.517735Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Personifyinc", "product": "Chromacam", "versions": [{"status": "affected", "version": "4.0.3.0"}]}]}], "published": "2026-06-19T15:16:34.713", "references": [{"url": "https://personifyinc.com/", "source": "disclosure@vulncheck.com"}, {"url": "https://personifyinc.com/download/chromacam", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/51210", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/chromacam-unquoted-service-path-privilege-escalation", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-428"}]}], "descriptions": [{"lang": "en", "value": "Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executables in unquoted path directories. Attackers with write access to C:\\ or subdirectories like C:\\Program Files (x86)\\Personify\\ can place a malicious Program.exe or PsyFrameGrabberService.exe file that executes with LocalSystem privileges when the service starts automatically at boot."}, {"lang": "es", "value": "Chromacam 4.0.3.0 contiene una vulnerabilidad de ruta de servicio sin comillas en el PsyFrameGrabberService que permite a atacantes locales ejecutar c\u00f3digo arbitrario al colocar ejecutables maliciosos en directorios de ruta sin comillas. Atacantes con acceso de escritura a C:\\ o subdirectorios como C:\\Program Files (x86)\\Personify\\ pueden colocar un archivo Program.exe o PsyFrameGrabberService.exe malicioso que se ejecuta con privilegios de LocalSystem cuando el servicio se inicia autom\u00e1ticamente al arrancar."}], "lastModified": "2026-09-26T23:10:00.127", "sourceIdentifier": "disclosure@vulncheck.com"}