CVE-2020-37231
HighPublic PoC
Published: 16 May 2026
Published
16 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2020-37231 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Cybertronsoft (inferred from references). Its CVSS base score is 7.8 (High).
Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
NVD Description
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Attackers can place malicious executables in the unquoted path directories to execute arbitrary…
more
code with LocalSystem privileges during service startup or system reboot.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Cybertronsoft
—
inferred from references and description; NVD did not file a CPE for this CVE