Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2020-37060

Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path

Description

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent system-level access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drive-Software Atomic Alarm Clock x86

  • 6.3affected

References