PT-2026-5577 · Deepinstinct+1 · Deep Instinct Windows Agent+1

Oscar Flores · Publicado 2026-02-01 · Atualizado 2026-02-01 · CVE-2020-37047

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Instinct Windows Agent version 1.2.29.0

Description The Deep Instinct Windows Agent version 1.2.29.0 has an issue with an unquoted service path in the DeepMgmtService. This allows local users to potentially run code with higher privileges. An attacker can exploit the unquoted path at C:Program FilesHP Sure SenseDeepMgmtService.exe to inject malicious code. This code would then run with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for DeepMgmtService is enclosed in quotes.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37047

Produtos afetados

Deep Instinct Windows Agent

Hp Sure Sense

Referências · 6

• 🔥 https://exploit-db.com/exploits/48174 · Exploit
• https://t.me/CVEtracker/43428 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-37047 · Nota de Segurança
• https://deepinstinct.com · Nota
• https://t.me/cveNotify/150513 · Publicação no Telegram
• https://vulncheck.com/advisories/deep-instinct-windows-agent-deepmgmtservice-unquoted-service-path · Nota