Vulnerability · Published Dec 17, 2025 · Assigned by VulnCheck
CVE-2023-53912USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation
Medium 6.2
In plain English
A medium-severity security flaw in USB Flash Drives Control from BiniSoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)6.2Medium
Exploit odds (30 days)0.1%top 96.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious executables and escalate privileges on Windows systems.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BiniSoft | USB Flash Drives Control | 4.1.0.0 |
Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-51508 exploit
- Official Product Webpage product
- VulnCheck Advisory: USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation third-party-advisory