CVE-2020-37062highCWE-428

CVE-2020-37062: high-severity vulnerability in Weird Solutions DHCP Turbo

DHCP Turbo 4.6.1298- 'DHCP Turbo 4' Unquoted Service Path

Published · Updated

Follow this CVE+ Monitor DHCP Turbo

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.2%
DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can place malicious executables in the service path to gain elevated privileges when the service starts.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Weird Solutions · DHCP Turbo