PT-2026-3150 · Isupport+1 · Brother Brprint Auditor+1

Brian Rodriguez · Published 2026-01-15 · Updated 2026-02-09 · CVE-2020-36929

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Brother BRPrint Auditor version 3.0.7

Description The software contains an unquoted service path vulnerability in its Windows service configurations. This allows local attackers to potentially execute arbitrary code. Attackers can exploit unquoted file paths in the BrAuSvc and BRPA Agent services to inject malicious executables and escalate privileges on the system.

Recommendations Apply appropriate quoting to the service paths in the Windows service configurations.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36929

Affected Products

Brother Brprint Auditor

Brprint Auditor

References · 7

• 🔥 https://exploit-db.com/exploits/50005 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36929 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36929 · Vendor Advisory
• https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be&lang=nl&redirect=on · Note
• https://t.me/cveNotify/151414 · Telegram Post
• https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be&lang=fr&redirect=on · Note
• https://vulncheck.com/advisories/brother-brprint-auditor-multiple-unquoted-service-path · Note