CVE-2020-36983
8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Summary
Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during system boot or service restart.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Pablosoftwaresolutions | Quick ’n Easy FTP Service | 3.2 | affected |
Weaknesses
- CWE-428: Unquoted Search Path or Element
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://www.exploit-db.com/exploits/48983
- https://www.pablosoftwaresolutions.com/html/quick__n_easy_ftp_service.html
- https://www.pablosoftwaresolutions.com/download.php?id=10
- https://www.vulncheck.com/advisories/quick-n-easy-ftp-service-unquoted-service-path
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.