CVE-2020-36979CWE-428

Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path

High · published January 27, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

⚡ A single misconfigured service path is all it takes for attackers to potentially hijack your system! 🎯 Think of it like a restaurant that displays its menu but forgets to lock the kitchen doors — anyone can come in and switch out the chef's special for something nasty without anyone noticing! In this scenario, an attacker could place malicious executables in the unquoted service path, gaining elevated system privileges during service startup. The ramifications could be absolutely devastating, potentially leading to unauthorized access, data theft, or even complete control of the affected system!

Put simply

Think of it like a restaurant that displays its menu but forgets to lock the kitchen doors — anyone can come in and switch out the chef's special for something nasty without anyone noticing! This vulnerability in the Atheros Coex Service Application version 8.0.0.255 allows attackers to exploit an unquoted service path in its Windows service configuration. When the service starts, it may inadvertently run malicious executables placed in that path, granting the attacker elevated permissions.

What to do

In this scenario, an attacker could place malicious executables in the unquoted service path, gaining elevated system privileges during service startup. The ramifications could be absolutely devastating, potentially leading to unauthorized access, data theft, or even complete control of the affected system! To mitigate this risk, immediately update to the latest version of the Atheros Coex Service Application that addresses this vulnerability. Additionally, ensure that all service paths are properly quoted and audit your system’s configurations to prevent similar issues in the future. You've got this! With a few quick fixes, you can lock down your system and keep those digital intruders at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-27T18:51Z
EPSS history
Timeline
  • 27 JAN 18:51Z
    Atheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service Path
    cvelistv5