Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36985 1 Gearboxcomputers 1 Ip Watcher 2026-01-29 7.8 High
IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with elevated LocalSystem privileges during service startup.
CVE-2020-36987 1 Gearboxcomputers 1 Program Access Controller 2026-01-29 7.8 High
Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.
CVE-2021-47833 1 Gearboxcomputers 1 Wifihotspot 2026-01-26 7.8 High
WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.