CVE-2020-37058 HIGH

CVE-2020-37058: Andrea ST Filters Service 1.0.64.7 - Unquoted service path

Vendor Andrea Electronics
Product Andrea ST Filters Service
Weakness CWE-428
Published January 30, 2026
Last update January 30, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration. Local attackers can exploit the unquoted path to inject malicious code that will execute with elevated LocalSystem privileges during service startup.

Key dates

02Disclosure timeline

January 30, 2026 CVE published
January 30, 2026 Record updated