CVE-2020-37247
HighPublic PoC
Published: 16 May 2026
Published
16 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2020-37247 is a high-severity Unquoted Search Path or Element (CWE-428) vulnerability in Kite (inferred from references). Its CVSS base score is 7.8 (High).
Operationally, it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
NVD Description
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be…
more
executed with LocalSystem privileges when the service starts.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Kite
—
inferred from references and description; NVD did not file a CPE for this CVE