CVE-2020-37061
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.8 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted executable path to inject malicious code that will be executed when the service starts with LocalSystem permissions.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-428
Source
NVD
Vendor
Weird-Solutions
Product
BOOTP Turbo
Discussion (0)
Add Comment
No comments yet. Be the first!