CVE-2020-36974: Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path
Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in 'C:\Program Files\IDT\WDM\AESTSr64.exe' to inject malicious code that would execute during service startup or system reboot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36974?
CVE-2020-36974 has been classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code with elevated privileges.
How do I fix CVE-2020-36974?
To fix CVE-2020-36974, ensure that the service path for AERTSr64.EXE is enclosed in quotes to prevent unquoted service path exploitation.
What are the potential impacts of CVE-2020-36974?
The potential impacts of CVE-2020-36974 include unauthorized execution of arbitrary code and escalation of privileges for local users.
Who is affected by CVE-2020-36974?
CVE-2020-36974 affects users of Realtek Andrea RT Filters version 1.0.64.7 and earlier.
Is CVE-2020-36974 exploitation easy?
Exploitation of CVE-2020-36974 can be easily achieved by a local attacker with minimal technical knowledge, making it a significant risk.