CVE-2020-9367

CVE-2020-9367 is a DLL Hijacking vulnerability affecting the MPS Agent in Zoho ManageEngine Desktop Central MSP build 10.0.486. Specifically, dcinventory.exe and dcconfig.exe attempt to load CSUNSAPI.dll without a full path, and since this DLL is missing, an attacker can inject malicious code. This vulnerability has a CVSS score of 7.8 (High) due to its local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, potentially leading to privilege escalation to NT AUTHORITY\SYSTEM. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.