CVE-2020-36930

CVE-2020-36930 describes an unquoted service path vulnerability in SysGauge Server 7.9.18, specifically within its binary path configuration. This flaw allows local attackers to execute arbitrary code by injecting malicious executables due to the unquoted path in 'C:\Program Files\SysGauge Server\bin\sysgaus.exe', potentially leading to privilege escalation. The vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, requiring low privileges, and resulting in high impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor readily available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.