CVE-2024-1201 is a High severity unquoted search path flaw, scored 7.8, in PanteraSoft HDD Health 4.2.0.112 and earlier. A local attacker can place a malicious executable in the search path for privilege escalation. INCIBE CERT reports no solution at this time, so mitigate by tightening folder permissions.
What's affected
The record and INCIBE CERT list HDD Health 4.2.0.112 and earlier. INCIBE states that there is no reported solution at this time and lists no fixed version.
The flaw needs local access. An attacker stores a malicious executable in a location that Windows checks because a service path contains spaces and is not wrapped in quotes.
How to check if you're exposed
Look for services with unquoted paths that contain spaces. The following PowerShell lists them, and you can filter for HDD Health.
Get-CimInstance Win32_Service | Where-Object { $_.PathName -notmatch '^"' -and $_.PathName -match ' ' -and $_.PathName -notmatch '^C:\\Windows' } | Select-Object Name, PathName
Also check the installed version of HDD Health in Apps and features.
What to do now
- Find machines with HDD Health 4.2.0.112 or earlier.
- Check PanteraSoft for a newer release, since INCIBE reports none at the time of its notice.
- Where you can, stop non administrators from creating files in the root of the system drive and in program folders.
- Consider uninstalling the tool if you do not need its service.
- Only fix the registry service path yourself if you are comfortable with the change and have a backup.
Why it matters
The class is an unquoted search path or element, CWE-428. When a Windows service path contains spaces and is not quoted, the system may try shorter paths first, so a file placed earlier in the path runs with the service's privileges, often SYSTEM.
The local requirement keeps it below Critical. On shared workstations, remote desktop servers and kiosks, a user who can write a file to the right folder can climb to administrator. The record's KEV flag is false.
Quick check
Is there a fixed version?
INCIBE CERT says there is no reported solution at this time. Check the vendor for newer releases.
What is an unquoted search path?
A service path with spaces that is not enclosed in quotes, so Windows may run a file from an earlier part of the path.
Sources
Last reviewed: 19 October 2026.
