CVE-2020-37063Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-01); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-01: 1Mentions · 2026-02-05: 1Technical Details · 2026-02-01: 1Technical Details · 2026-02-05: 102-0102-05
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-011
Disclosure1
2026-02-051
General1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2020-37063 TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attack… https://www.cve.org/CVERecord?id=CVE-2020-37063

    Post summary

    The text reports CVE-2020-37063 as an unquoted service path vulnerability in TFTP Turbo 4.6.1273 that can enable local attackers to execute arbitrary code with elevated privileges.

    00010253
    56.5K followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2020-37063 (CVSS:8.5, HIGH) is Awaiting Analysis. TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute a..https://nvd.nist.gov/vuln/detail/CVE-2020-37063 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post references CVE‑2020‑37063, noting its CVSS score and describing an unquoted service path vulnerability that could permit local code execution, but it does not mention any PoC, exploit, patch, or active usage.

    0000039
    171 followersView on X

Explore more