CVE-2020-36953
HIGHMiniTool ShadowMaker 3.2 - Local Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-36953. PoCs published by Thalia Nieto.
AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in MiniTool ShadowMaker 3.2. The vulnerability allows local privilege escalation due to the service path containing spaces and lacking quotes, enabling an attacker to place a malicious executable in the path.
Description
MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' to inject malicious executables and escalate privileges.
Exploits (1)
This is a technical writeup detailing an unquoted service path vulnerability in MiniTool ShadowMaker 3.2. The vulnerability allows local privilege escalation due to the service path containing spaces and lacking quotes, enabling an attacker to place a malicious executable in the path.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H