Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36958. PoCs published by Ismael Nava.
AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in Kite 1.2020.1119.0. The author demonstrates how the service path lacks quotes, which could allow local privilege escalation if an attacker places a malicious executable in a higher-level directory.
Description
Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Kite\KiteService.exe' to inject malicious executables and escalate privileges on the system.
Exploits (1)
This is a technical writeup detailing an unquoted service path vulnerability in Kite 1.2020.1119.0. The author demonstrates how the service path lacks quotes, which could allow local privilege escalation if an attacker places a malicious executable in a higher-level directory.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H