PT-2026-3150 · Isupport+1 · Brother Brprint Auditor+1

Brian Rodriguez · Publicado 2026-01-15 · Atualizado 2026-02-09 · CVE-2020-36929

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Brother BRPrint Auditor version 3.0.7

Description The software contains an unquoted service path vulnerability in its Windows service configurations. This allows local attackers to potentially execute arbitrary code. Attackers can exploit unquoted file paths in the BrAuSvc and BRPA Agent services to inject malicious executables and escalate privileges on the system.

Recommendations Apply appropriate quoting to the service paths in the Windows service configurations.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36929

Produtos afetados

Brother Brprint Auditor

Brprint Auditor

Referências · 7

• 🔥 https://exploit-db.com/exploits/50005 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36929 · Nota de Segurança
• https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be&lang=nl&redirect=on · Nota
• https://osv.dev/vulnerability/CVE-2020-36929 · Aviso do Fabricante
• https://t.me/cveNotify/151414 · Publicação no Telegram
• https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be&lang=fr&redirect=on · Nota
• https://vulncheck.com/advisories/brother-brprint-auditor-multiple-unquoted-service-path · Nota