Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2020-36928

Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path

Description

Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Brother\BRAgent\ to inject and execute malicious code with elevated system permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brother Brother BRAgent

  • 1.38affected

References