CVE-2020-36981

HIGH

Motorola Device Manager 2.4.5 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2020-36981. PoCs published by Angel Canseco.

AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.5.4. The vulnerability allows local privilege escalation by exploiting the service path to execute arbitrary code with elevated privileges upon system reboot.

Description

Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in ForwardDaemon.exe to inject malicious code that will execute with elevated system privileges during service startup.

Exploits (2)

exploitdb WRITEUP
by Angel Canseco · textlocalwindows
https://www.exploit-db.com/exploits/49013

This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.5.4. The vulnerability allows local privilege escalation by exploiting the service path to execute arbitrary code with elevated privileges upon system reboot.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Motorola Device Manager 2.5.4
Auth required
Prerequisites: Local access to the system · Ability to write to the system root path
devstral-2 · analyzed Feb 18, 2026 Full analysis →
exploitdb WRITEUP
by Angel Canseco · textlocalwindows
https://www.exploit-db.com/exploits/49011

This is a technical writeup detailing an unquoted service path vulnerability in Motorola Device Manager 2.4.5. The vulnerability allows local privilege escalation by exploiting the service path 'C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe' due to improper handling of spaces in the path.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Motorola Device Manager 2.4.5
Auth required
Prerequisites: Local access to the system · Ability to write to the root of the system drive
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/49011
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/49013

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 6.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (2)
Filehorse/Motorola Device Manager 2.4.5
Filehorse/Motorola Device Manager 2.5.4
Published Jan 27, 2026
Tracked Since Feb 18, 2026