CVE-2025-4540: C-Lodop CLodopPrintService Unquoted Service Path Local Privilege Escalation

Key Information Vulnerability Overview CVE ID: CVE-2025-4540 Vulnerability Type: Unquoted Search Path Leading to Local Privilege Escalation Severity: Medium Affected Scope: Windows Operating System Affected Software: C-Lodop CLodopPrintService CVE Status: Pending Confirmation (CNVD-XXXX) Vulnerability Details Service Name: C-Lodop Cloud Printing No Logger Description: Due to an improperly quoted binary path for the CLodopPrintService service, attackers can exploit this vulnerability to escalate privileges on Windows operating systems. Test Steps: 1. Check if the unquoted service path exists. 2. Create a Program.exe file on the C: drive. 3. Restart the CLodopPrintService or reset the Windows system. 4. Program.exe will execute and output to test.txt, proving it runs with system privileges. Root Cause The binary path for the CLodopPrintService service was not created according to best practices. Official Remediation Upgrade to the latest version of CLodop, v8.6.8.3. Mitigation Measures Manually modify the binary path of the CLodopPrintService service. Timeline 2025-05-01: Report submitted to NightEdge team. 2025-05-02: NightEdge team confirms the vulnerability. 2025-09-01: NightEdge team confirms patch will be released in four weeks. 2025-09-30: Patched version 8.6.8.3 released. 2025-10-01: CVE request submitted to CNVD. 2025-10-02: No response from CNVD. 2025-10-03: CVE request and patch validation steps submitted to MITRE. 2025-10-04: MITRE assigns CVE ID CVE-2025-4540. 2025-10-05: CVE ID confirmed as assigned to CVE-2025-4540. Conclusion It is recommended to use the NightEdge platform for rapid response and benefits. If not using NightEdge, Micro Focus Fortify appears to be a better alternative and is recommended.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-4540: C-Lodop CLodopPrintService Unquoted Service Path Local Privilege Escalation