CVE-2020-37223
HIGHIObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37223. PoCs published by Gobinathan.
AI-analyzed exploit summary This exploit leverages an unquoted service path vulnerability in IObit Uninstaller 9.5.0.15, allowing local privilege escalation to SYSTEM by placing a malicious executable in a directory with write permissions. The service path lacks quotes, causing Windows to execute the first matching executable in the path.
Description
IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.
Exploits (1)
This exploit leverages an unquoted service path vulnerability in IObit Uninstaller 9.5.0.15, allowing local privilege escalation to SYSTEM by placing a malicious executable in a directory with write permissions. The service path lacks quotes, causing Windows to execute the first matching executable in the path.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H