CVE-2016-20056

CVE-2016-20056 identifies an unquoted service path vulnerability in Spy Emergency build 23.0.205, specifically within its SpyEmrgHealth and SpyEmrgSrv services. This flaw allows a local attacker to escalate privileges by inserting malicious executables into the unquoted path, which are then executed with LocalSystem privileges upon service restart or system reboot. Rated with a CVSS score of 7.8 (High), it presents a significant impact (C:H, I:H, A:H) with low attack complexity (AC:L) and requires only low privileges (PR:L) for a local attacker (AV:L). While the vulnerability is severe, there is no evidence of active exploitation, no public exploit code available in common databases like Metasploit or ExploitDB, and community discussion is minimal.