VULNERABILITY INTELLIGENCE
CVE-2020-37160
CVSS score8.5 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-02-07
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access.
Weakness classification
- CWE-276: Incorrect Default Permissions