PT-2026-3151 · Sysgauge+1 · Sysgauge

Brian Rodriguez · Published 2026-01-15 · Updated 2026-02-09 · CVE-2020-36930

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SysGauge Server version 7.9.18

Description The software contains an unquoted service path vulnerability in its binary path configuration. This allows local attackers to potentially execute arbitrary code. The vulnerability exists due to the unquoted path in 'C:Program FilesSysGauge Serverbinsysgaus.exe', enabling attackers to inject malicious executables and escalate privileges.

Recommendations Ensure the service path is enclosed in quotes during configuration.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36930

Affected Products

Sysgauge

References · 6

• 🔥 https://exploit-db.com/exploits/50009 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36930 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36930 · Vendor Advisory
• https://t.me/cveNotify/151415 · Telegram Post
• https://vulncheck.com/advisories/sysgauge-sysgauge-server-unquoted-service-path · Note
• https://sysgauge.com · Note