CVE-2020-36953: high-severity vulnerability in MiniTool ShadowMaker
MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' to inject malicious executables and escalate privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Minitool · MiniTool ShadowMaker