CVE-2016-20058

HIGH

Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2016-20058 has a selected CVSS score of 8.5 (high); EIP currently links 1 catalogued exploit.

Description

Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 6, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

NETGATE AMITI Antivirus

Browse Netgate / NETGATE AMITI Antivirus
CVE List23.0.305affected

Proofs of concept

1

Catalogued exploits

ExploitDBNETGATE AMITI Antivirus 23.0.305 - Unquoted Service Path Privilege EscalationExploitDB exploitby Amir.ghtNot analyzed1 file
ExploitDB
PoC details

References

5