CVE-2020-37230 | BDVDB-2026-333648 Detail

Description#

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the service path and execute it with LocalSystem privileges when the service restarts or the system reboots.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-16Record published in the CVE List.
2. Version 22026-05-18Most recent update recorded in the CVE List.