PT-2026-5002 · Atheros · Coex Service Application

Isabel Lopez · Published 2026-01-27 · Updated 2026-01-27 · CVE-2020-36979

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atheros Coex Service Application version 8.0.0.255

Description The Windows service configuration contains an unquoted service path. This allows attackers to place malicious executables in the service path to gain elevated system privileges when the service starts.

Recommendations Update Atheros Coex Service Application version 8.0.0.255 to a version that quotes the service path in the Windows registry.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36979

Affected Products

Coex Service Application

References · 5

• 🔥 https://exploit-db.com/exploits/49053 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36979 · Security Note
• https://vulncheck.com/advisories/atheros-coex-service-application-zatheros-btwlan-coex-agent-unquoted-service-path · Note
• https://boostbyreason.com/resource-file-9102-ath_coexagent-exe.aspx · Note
• https://file.net/process/ath_coexagent.exe.html · Note