VULNERABILITY INTELLIGENCE
CVE-2020-37101
CVSS score8.5 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-02-03
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\VPN Unlimited\' to replace the service executable and gain elevated system privileges.
Weakness classification
- CWE-428: Unquoted Search Path or Element