CVE-2020-37063
HIGHTFTP Turbo 4.6.1273 - Unquoted Service Path Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37063. PoCs published by boku.
AI-analyzed exploit summary This is a writeup demonstrating an unquoted service path vulnerability in TFTP Turbo 4.6.1273. The exploit shows how the service path is vulnerable due to spaces in the path, which could allow local privilege escalation if an attacker can place a malicious executable in a higher-level directory.
Description
TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.
Exploits (1)
This is a writeup demonstrating an unquoted service path vulnerability in TFTP Turbo 4.6.1273. The exploit shows how the service path is vulnerable due to spaces in the path, which could allow local privilege escalation if an attacker can place a malicious executable in a higher-level directory.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H