hmpalertsvc has an unquoted service path with a space in it.

Question

I have two questions

How do I quickly add quotes in the registry setting for hmpalertsvc entry to change it from this C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe to this &ldquo; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe&rdquo;? 
 When will Sophos release the update that will add the quotes as referenced above?

Vulnerability Found Unquoted Service Path 
 Nessus found the following service with an untrusted path : hmpalertsvc : C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe

Kyle Parrish · Accepted Answer

In that case you could disable TP from the Central Console. I am pretty sure you can do that in bulk. If not, my next choice would be the API.

PavSupport · Answer

Administrator User443 I just wanted to provide an update on this issue - it's fixed in Hitmanpro component version 3.8.3. The release of that version will be happening from Nov 02 and finished by Nov 18 2021.

Kyle Parrish · Answer

Take a look at this. There may be a hotfix already. community.sophos.com/.../unquoted-path-vulnerability---please-fix-asap

hmpalertsvc has an unquoted service path with a space in it.

Top Replies