CVE-2016-20057

HIGH

NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2016-20057 has a selected CVSS score of 8.5 (high); EIP currently links 1 catalogued exploit.

Description

NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 6, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

NETGATE Registry Cleaner

Browse Netgate / NETGATE Registry Cleaner
CVE List16.0.205affected

Proofs of concept

1

Catalogued exploits

ExploitDBNETGATE Registry Cleaner 16.0.205 - Unquoted Service Path Privilege EscalationExploitDB exploitby Amir.ghtNot analyzed1 file
ExploitDB
PoC details

References

5