CVE-2020-36985

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with elevated LocalSystem privileges during service startup.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

No affected versions have been published.

Timeline

Published
Jan 28, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-369867.8Prey 1.9.6 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated privileges. AttCVE-2020-369877.8Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute cCVE-2020-369885.4PDW File Browser version 1.3 contains stored and reflected cross-site scripting vulnerabilities that allow authenticated attackers to injectCVE-2020-369897.8ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbiCVE-2020-36999.8Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in SnapdragonCVE-2020-369907.8Input Director 1.4.3 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to exeCVE-2020-369917.8ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevateCVE-2020-369927.8Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with eCVE-2020-369935.4LimeSurvey 4.3.10 contains a stored cross-site scripting vulnerability in the Survey Menu functionality of the administration panel. AttackeCVE-2020-369946.2QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crashCVE-2020-369957.5Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the CVE-2020-369966.4PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submit