Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Atta…

Published:

26 januari 2026 om 23:00:00

Alert date:

27 januari 2026 om 21:03:58

Source:

nvd.nist.gov

Network Infrastructure, Enterprise Applications

CVE-2020-36983 affects Quick 'n Easy FTP Service version 3.2, containing an unquoted service path vulnerability. Local attackers can exploit this misconfigured service binary path to execute arbitrary code during service startup. The vulnerability allows injection of malicious executables with elevated LocalSystem privileges. Exploitation occurs during system boot or service restart processes. This represents a privilege escalation vulnerability requiring local access.

Technical details

Mitigation steps:

Affected products:

Quick 'n Easy FTP Service 3.2