CVEvulnerability
CVE-2020-36981
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-428
Description
Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in ForwardDaemon.exe to inject malicious code that will execute with elevated system privileges during service startup.
Related
Weakness · CWE (1)
- CWE-428 Unquoted Search Path or Element weakness
References
- https://www.exploit-db.com/exploits/49011 www.exploit-db.com
- https://www.exploit-db.com/exploits/49013 www.exploit-db.com
- https://www.filehorse.com/es/descargar-motorola-device-manager/ www.filehorse.com
- https://www.vulncheck.com/advisories/motorola-device-manager-forwarddaemonexe-unquoted-service-path www.vulncheck.com