CVE-2019-25285 - Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path

Back Back to CVE browser

HIGH

Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path

Published Feb 4, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.18%

Description

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.

Affected products

Vendor Alps Product device Controller Default
n/a
- Version
  8.1202.1711.04
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Alps

device Controller

n/a

Version	Status	Constraints
8.1202.1711.04	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (3)

https://www.alps.com/e/
product
https://www.exploit-db.com/exploits/47637
exploit
https://www.vulncheck.com/advisories/alps-pointing-device-controller-aphidmonitorservice-unquoted-service-path
third-party-advisory

Link	Providers	Tags
https://www.alps.com/e/		product
https://www.exploit-db.com/exploits/47637		exploit
https://www.vulncheck.com/advisories/alps-pointing-device-controller-aphidmonitorservice-unquoted-service-path		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulnCheck

Published Feb 4, 2026

Updated Jul 28, 2026

Reserved Jan 6, 2026

Link CVE-2019-25285

CISA Vulnrichment

Updated Feb 5, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2019-25285

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-25285