CVE-2020-37058CWE-428

Andrea ST Filters Service 1.0.64.7 - Unquoted service path

High · published January 30, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

⚡ Unquoted service paths can be a hacker's dream! In Andrea ST Filters Service 1.0.64.7, attackers can exploit this sneaky flaw to run malicious code at startup with elevated privileges. 🔥 Think of it like a delivery driver who just accepts any package without checking the address — if bad code gets slipped in, it can wreak havoc just as the service starts rolling out the red carpet! An attacker could inject malicious code that runs with LocalSystem privileges, potentially giving them full control of the machine. This could lead to data breaches, system manipulation, or even a complete takeover of the affected system. The stakes couldn’t be higher!

Put simply

Think of it like a delivery driver who just accepts any package without checking the address — if bad code gets slipped in, it can wreak havoc just as the service starts rolling out the red carpet! This vulnerability arises from an unquoted service path in the Windows service configuration for Andrea ST Filters Service, allowing local attackers to execute arbitrary code during service startup.

What to do

An attacker could inject malicious code that runs with LocalSystem privileges, potentially giving them full control of the machine. This could lead to data breaches, system manipulation, or even a complete takeover of the affected system. The stakes couldn’t be higher! To secure your system, update to the latest version of the Andrea ST Filters Service that addresses this vulnerability, and ensure that all service paths are properly quoted to prevent similar exploits in the future. Regularly audit your services for any unquoted paths as part of your security hygiene. You've got this! With a few updates, you can protect your system and keep the baddies at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00140 · 3.1th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-30T16:16Z
EPSS history
Timeline
  • 30 JAN 16:16Z
    Andrea ST Filters Service 1.0.64.7 - Unquoted service path
    cvelistv5