Cyber Posture

CVE-2020-37229

HighPublic PoC

Published: 16 May 2026

Published
16 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-37229 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Oki (inferred from references). Its CVSS base score is 7.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within…

more

the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-428

Affected Products

Oki
—
inferred from references and description; NVD did not file a CPE for this CVE

References