Sysgauge
CVE-2020-36930
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\SysGauge Server\bin\sysgaus.exe' to inject malicious executables and escalate privileges.
AnalysisAI
Sysgauge versions up to 7.9.18 contains a vulnerability that allows attackers to potentially execute arbitrary code (CVSS 7.8).
Technical ContextAI
affects Sysgauge. SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\SysGauge Server\bin\sysgaus.exe' to inject malicious executables and escalate privileges.
RemediationAI
Monitor vendor advisories for a patch.
An issue was discovered in SysGauge 1.5.18. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitab
In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. Rated high severity (CVSS 7.5
SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers
The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system
SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers
Same weakness CWE-428 – Unquoted Search Path or Element
View allShare
External POC / Exploit Code
Leaving vuln.today