CVE-2020-37100

Name of the Vulnerable Software and Affected Versions Sync Breeze Enterprise version 12.4.18

Description Sync Breeze Enterprise 12.4.18 contains an unquoted service path that could allow local attackers to execute arbitrary code with elevated system privileges. The issue arises from an unquoted binary path, enabling attackers to place malicious executables in specific file system locations and hijack the service startup process.

Recommendations Ensure the service path is properly quoted to prevent the execution of unauthorized code.