CVE-2020-36974CWE-428

Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path

High · published January 27, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

⚡ An unquoted service path vulnerability could let a local attacker execute code with elevated privileges! Imagine the chaos if your service is tricked into running malicious code as it starts up. 🔥 Think of it like a restaurant where the chef takes orders without checking the recipe — if a customer slips in a new ingredient without anyone noticing, it could ruin the whole dish! In this case, a local attacker could take advantage of the unquoted path to inject harmful code during service startup. If exploited, an attacker could gain elevated system privileges, potentially allowing them to do anything from stealing sensitive data to taking complete control of the system. This could lead to devastating consequences like data breaches or system failures, all while the system thinks everything is running smoothly!

Put simply

Think of it like a restaurant where the chef takes orders without checking the recipe — if a customer slips in a new ingredient without anyone noticing, it could ruin the whole dish! In this case, a local attacker could take advantage of the unquoted path to inject harmful code during service startup. The vulnerability exists in Realtek Andrea RT Filters 1.0.64.7 due to the service executable path being unquoted. This allows local users to inject and execute arbitrary code when the service starts, effectively bypassing normal security checks.

What to do

If exploited, an attacker could gain elevated system privileges, potentially allowing them to do anything from stealing sensitive data to taking complete control of the system. This could lead to devastating consequences like data breaches or system failures, all while the system thinks everything is running smoothly! To remediate this vulnerability, update the software to the latest version that addresses this issue. Additionally, ensure that any service paths are properly quoted to prevent similar exploits in the future. Regularly audit your applications for unquoted service paths as part of good security hygiene. You've got this! Follow these steps to lock down your systems and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-27T18:51Z
EPSS history
Timeline
  • 27 JAN 18:51Z
    Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path
    cvelistv5