PT-2026-5577 · Deepinstinct+1 · Deep Instinct Windows Agent+1

Oscar Flores · Published 2026-02-01 · Updated 2026-02-01 · CVE-2020-37047

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Deep Instinct Windows Agent version 1.2.29.0

Description The Deep Instinct Windows Agent version 1.2.29.0 has an issue with an unquoted service path in the DeepMgmtService. This allows local users to potentially run code with higher privileges. An attacker can exploit the unquoted path at C:Program FilesHP Sure SenseDeepMgmtService.exe to inject malicious code. This code would then run with LocalSystem permissions when the service starts.

Recommendations Ensure the service path for DeepMgmtService is enclosed in quotes.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37047

Affected Products

Deep Instinct Windows Agent

Hp Sure Sense

References · 6

• 🔥 https://exploit-db.com/exploits/48174 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37047 · Security Note
• https://t.me/CVEtracker/43428 · Telegram Post
• https://deepinstinct.com · Note
• https://t.me/cveNotify/150513 · Telegram Post
• https://vulncheck.com/advisories/deep-instinct-windows-agent-deepmgmtservice-unquoted-service-path · Note