PT-2026-41429 · Oki · Oki Spsv Port Manager

Julio Aviña · Published 2026-05-16 · Updated 2026-05-16 · CVE-2020-37229

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37229

Affected Products

Oki Spsv Port Manager

References · 5

• 🔥 https://exploit-db.com/exploits/49005 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37229 · Security Note
• https://oki.com/mx/printing/download/sPSV_010041_2_270910.exe · Note
• https://oki.com · Note
• https://vulncheck.com/advisories/oki-spsv-port-manager-unquoted-service-path-privilege-escalation · Note