CVE-2016-20055Disclosure(iobit / advanced_system_care)

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

iobit CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/40577

Vendor / third-party advisories

https://www.vulncheck.com/advisories/iobit-advanced-systemcare-unquoted-service-path-privilege-escalation

Other references

Weakness type (CWE)

CWE-428

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

advanced_system_care

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

iobit

Products

advanced_system_care

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2016-20055

Full discourse1 post

CVE@CVEnew186d
Disclosure
CVE-2016-20055 IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate pr… https://www.cve.org/CVERecord?id=CVE-2016-20055
Post summary
The tweet discloses CVE-2016-20055 as an unquoted service path vulnerability in IObit Advanced SystemCare 10.0.2 that permits local privilege escalation, without providing PoC, exploit code, patch details or evidence of active exploitation.
00000129
57.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	iobit	advanced_system_care	-	-	-

Explore more

Back to dashboard iobit CVEs advanced_system_care vulnerabilities