CVE-2020-36934
HIGHDeep Instinct Windows Agent 1.2.24.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-36934. PoCs published by Paulina Girón.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Deep Instinct Windows Agent 1.2.24.0. The vulnerability could allow local privilege escalation if an attacker can place executable code in a system root path.
Description
Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject malicious code that would execute with LocalSystem permissions during service startup.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in Deep Instinct Windows Agent 1.2.24.0. The vulnerability could allow local privilege escalation if an attacker can place executable code in a system root path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H