SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbit…

CVE-2020-36930 affects SysGauge Server version 7.9.18 with an unquoted service path vulnerability. The vulnerability exists in the binary path configuration allowing local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path 'C:\Program Files\SysGauge Server\bin\sysgaus.exe' to inject malicious executables. This enables privilege escalation attacks on affected systems. The vulnerability requires local access to exploit but can lead to complete system compromise.