{"id":"CVE-2020-36977","state":"PUBLISHED","title":"Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path","description":"Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.","publishedAt":"2026-01-27T18:51:03.705Z","updatedAt":"2026-01-29T16:48:59.066Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Wondershare Wondershare Driver Install Service help"],"affected":[{"vendor":"Wondershare","product":"Wondershare Driver Install Service help","versions":[{"version":"10.7.1.321","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/49101","https://www.wondershare.com/","https://www.wondershare.com/drfone/","https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:47:24.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/36xxx/CVE-2020-36977.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-36977","state":"PUBLISHED","datePublished":"2026-01-27T18:51:03.705Z","dateUpdated":"2026-01-29T16:48:59.066Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-27T15:47:07.999Z"},"containers":{"cna":{"title":"Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path","descriptions":[{"lang":"en","value":"Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account."}],"affected":[{"vendor":"Wondershare","product":"Wondershare Driver Install Service help","versions":[{"version":"10.7.1.321","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/49101","name":"ExploitDB-49101","tags":["exploit"]},{"url":"https://www.wondershare.com/","name":"Vendor Homepage","tags":["product"]},{"url":"https://www.wondershare.com/drfone/","name":"Software Product Page","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path","name":"VulnCheck Advisory: Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","lang":"en","description":"Unquoted Search Path or Element","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-01-27T18:51:03.705Z"},"datePublic":"2020-11-24T00:00:00.000Z","credits":[{"lang":"en","value":"Luis Sandoval","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.exploit-db.com/exploits/49101","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-29T15:49:29.391540Z","id":"CVE-2020-36977","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-29T16:48:59.066Z"}}]}}}