Executive brief
NetDrive is a software utility that allows users to mount remote cloud storage as local drives on their computers. A security flaw in version 2.6.12 allows a local user with limited permissions to gain full administrative control (SYSTEM privileges) over the computer. This occurs because the software's background service does not properly secure its file path, allowing an attacker to place a malicious file that the system will automatically run during startup or reboot.
Technical details
NetDrive 2.6.12 is vulnerable to an unquoted service path (CWE-428) within the 'Netdrive2_Service_Netdrive2' service. The service's binary path (C:\Program Files\NetDrive2\nd2svc.exe) is not enclosed in quotation marks, which allows a local attacker with write access to intermediate directories to place a malicious executable (e.g., C:\Program.exe). Because the service runs with SYSTEM privileges, the malicious code will be executed with those same elevated permissions upon service start or system reboot. This vulnerability requires local access to the machine and the ability to write to the system root or application path.
Affected products
- Netdrive NetDrive 2.6.12
Timeline
- 2016-09-24: disclosed: Original exploit discovery by Tulpa
- 2016-09-26: other: Exploit published on Exploit-DB
- 2026-06-19: advisory: CVE-2016-20092 published/updated in NVD dataset