CVE-2020-36928
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Brother\BRAgent\ to inject and execute malicious code with elevated system permissions.
CVSS 4.0 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products