CVE-2020-37229Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-17: 2Technical Details · 2026-05-17: 205-17
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2020-37229 OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserti… https://www.cve.org/CVERecord?id=CVE-2020-37229 ----- Traducción: CVE-2020-37229 OKI… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2020‑37229, detailing an unquoted service path flaw that grants local privilege escalation, but it provides no PoC, exploit code, patch, or evidence of active exploitation.

    0000021
    78 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2020-37229 OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserti… https://www.cve.org/CVERecord?id=CVE-2020-37229

    Post summary

    This entry highlights the existence of an unquoted service path vulnerability in OKI sPSV Port Manager 1.0.41 that permits local privilege escalation. No PoC, exploit, patch, or active exploitation details are provided.

    00000287
    57.5K followersView on X

Explore more