Vulnerability Description
Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/49101
- https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-ele
- https://www.wondershare.com/
- https://www.wondershare.com/drfone/
- https://www.exploit-db.com/exploits/49101
FAQ
What is CVE-2020-36977?
CVE-2020-36977 is a vulnerability with a CVSS score of 7.8 (HIGH). Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can ex...
How severe is CVE-2020-36977?
CVE-2020-36977 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-36977?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.