CVE-2020-36977: Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path
Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36977?
CVE-2020-36977 has a medium severity rating due to its ability to allow local attackers to execute arbitrary code.
How do I fix CVE-2020-36977?
To fix CVE-2020-36977, ensure that the Wondershare Driver Install Service is updated to the latest version which resolves the unquoted service path issue.
What types of systems are affected by CVE-2020-36977?
CVE-2020-36977 affects systems that have Wondershare Driver Install Service version 10.7.1.321 installed.
Can CVE-2020-36977 be exploited remotely?
No, CVE-2020-36977 requires local access to the system to exploit the unquoted service path vulnerability.
What should I do if my system is vulnerable to CVE-2020-36977?
If your system is vulnerable to CVE-2020-36977, it is recommended to apply the latest updates for Wondershare Driver Install Service and monitor for any unauthorized access.