Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36903. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit describes an unquoted search path vulnerability in Selea CarPlateServer (CPS) v4.0.1.6, allowing local privilege escalation via arbitrary code execution with elevated privileges. The service 'Selea CarPlateServer' is vulnerable due to an unquoted path in its BINARY_PATH_NAME.
Description
Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that allows local users to potentially execute code with elevated privileges. Attackers can exploit the service's unquoted binary path by inserting malicious code in the system root path that could execute with LocalSystem privileges during application startup or reboot.
Exploits (1)
The exploit describes an unquoted search path vulnerability in Selea CarPlateServer (CPS) v4.0.1.6, allowing local privilege escalation via arbitrary code execution with elevated privileges. The service 'Selea CarPlateServer' is vulnerable due to an unquoted path in its BINARY_PATH_NAME.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H