CVE-2020-36987highCWE-428

CVE-2020-36987: fallo de gravedad alta en Gearboxcomputers Program Access Controller

Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path

Publicada el · Actualizada el

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.2%
probabilidad de explotación
0.2%top 93% de las CVE
explotación observada
noninguna fuente lo reporta
Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Gearboxcomputers · Program Access Controller
Referencias
https://www.exploit-db.com/exploits/48966https://www.gearboxcomputers.com/https://www.vulncheck.com/advisories/program-access-controller-pacserviceexe-unquoted-service-path