Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-36981. PoCs published by Angel Canseco.
AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.5.4. The vulnerability allows local privilege escalation by exploiting the service path to execute arbitrary code with elevated privileges upon system reboot.
Description
Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in ForwardDaemon.exe to inject malicious code that will execute with elevated system privileges during service startup.
Exploits (2)
This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.5.4. The vulnerability allows local privilege escalation by exploiting the service path to execute arbitrary code with elevated privileges upon system reboot.
This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.4.5. The vulnerability allows local privilege escalation by exploiting the service path 'C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe' due to improper handling of spaces in the path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H