Cyber Posture

CVE-2020-37230

HighPublic PoC

Published: 16 May 2026

Published
16 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-37230 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Syncplify (inferred from references). Its CVSS base score is 7.8 (High).

Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the service path and execute it with…

more

LocalSystem privileges when the service restarts or the system reboots.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-428

Affected Products

Syncplify
—
inferred from references and description; NVD did not file a CPE for this CVE

References