CVE-2020-37229

Description

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

Overview

State

—

Assigner (CNA)

—

CVSS severity

high

CVSS score

7.8 / 10

CVSS vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Effective score

7.8 / 10 HIGH source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2020-37229

Linked Threat

CVE-2020-37229 — CVE-2020-37229

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2026-05-16 16:16:18 UTC

NVD last modified

2026-05-18 20:16:05 UTC

NVD CVSS v3.1

7.8 / 10 HIGH source: disclosure@vulncheck.com

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

1.8 / 10

Impact subscore

5.9 / 10

EPSS score

0.0001 (probability of exploitation in next 30 days)

EPSS percentile

2.50% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD-assigned CWE(s): CWE-428 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2020-31230

Assigner

VulnCheck

Published

May 16, 2026, 3:25:47 PM

Updated

May 18, 2026, 12:46:33 PM

EUVD base score (CVSS 4.0)

8.5 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EUVD-reported EPSS

0.0100

Vendors

OKI

Products

OKI sPSV Port Manager (1.0.41)

Aliases

GHSA-43wj-g2f9-3cg4

ENISA description: OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (7)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://nvd.nist.gov/vuln/detail/CVE-2020-37229 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2020-37229 tenable:www.cve.org
• https://www.exploit-db.com/exploits/49005 tenable:www.exploit-db.com
• https://www.first.org/epss/ tenable:www.first.org
• https://www.oki.com/ tenable:www.oki.com
• https://www.oki.com/mx/printing/download/sPSV_010041_2_270910.exe tenable:www.oki.com
• https://www.vulncheck.com/advisories/oki-spsv-port-manager-unquoted-service-path-privilege-escalation tenable:www.vulncheck.com

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Security Updates - Red Hat Customer Portal
  web:access.redhat.com

  Learn about our open source products, services, and company. You are here

  2026-05-26 02:54 UTC
• Virtual Patching - OWASP Cheat Sheet Series
  web:cheatsheetseries.owasp.org

  Virtual Patching Cheat Sheet Introduction The goal with this cheat Sheet is to present a concise virtual patching framework that organizations can follow to maximize the timely implementation of mitigation protections. Definition: Virtual Patching A security policy enforcement layer which prevents and reports the exploitation attempt of a known vulnerability. The virtual patch works when the ...

  2026-05-26 02:54 UTC
• Security Advisory Bulletin 064 | Ubiquiti Community
  web:community.ui.com

  Published: May 21, 2026 Updated: May 22, 2026 Version: 1.1 Revision: 1.1 Summary 1 of 5 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Affected Products: UniFi OS Server (Version 5.0.6 and earlier) Mitigation : Update your UniFi OS Server to Version 5.0.8 or later ...

  2026-05-26 02:54 UTC
• N-central third-party software patch list
  web:documentation.n-able.com

  For more information on how Patch Manager provides third-party patching, see Patching third-party software. Use the table's InstallerURLs location when configuring vendor and patch exclusions in your firewalls and other web-monitoring software.

  2026-05-26 02:54 UTC
• NVD - Home
  web:nvd.nist.gov

  The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...

  2026-05-26 02:54 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-26 02:54 UTC
• Landing Page | ServiceNow Common Vulnerabilities & Exposures (CVE ...
  web:support.servicenow.com

  Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

  2026-05-26 02:54 UTC
• Microsoft's May 2026 Patch Tuesday Fixes 130+ Vulnerabilities ...
  web:windowsreport.com

  Microsoft has released its May 2026 Patch Tuesday updates for Windows 11 and Windows 10, shipping as KB5089549 and KB5087544. The updates include fixes for more than 130 security vulnerabilities across Windows, Office, SharePoint, DNS components, and core system services, as Bleeping Computer writes. While no publicly disclosed zero-day vulnerabilities were reported this month, the […]

  2026-05-26 02:54 UTC
• Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws
  web:www.bleepingcomputer.com

  Today is Microsoft's March 2026 Patch Tuesday with security updates for 79 flaws, including 2 publicly disclosed zero-day vulnerabilities.

  2026-05-26 02:54 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-05-26 02:54 UTC

Only Available for Registered Users. Sign in to view.