CVE-2020-37047
HIGHDeep Instinct Windows Agent 1.2.29.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37047. PoCs published by Oscar Flores.
AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in Deep Instinct Windows Agent 1.2.29.0. The vulnerability allows local privilege escalation if an attacker can place an executable in the system root path, which would then be executed with elevated privileges.
Description
Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicious code that would execute with LocalSystem permissions during service startup.
Exploits (1)
This is a writeup describing an unquoted service path vulnerability in Deep Instinct Windows Agent 1.2.29.0. The vulnerability allows local privilege escalation if an attacker can place an executable in the system root path, which would then be executed with elevated privileges.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H