CVE-2020-36979

Impact

Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path by placing malicious executables in the service path to gain elevated system privileges during service startup.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://www.boostbyreason.com/resource-file-9102-ath_coexagent-exe.aspx
• https://www.exploit-db.com/exploits/49053
• https://www.file.net/process/ath_coexagent.exe.html
• https://www.vulncheck.com/advisories/atheros-coex-service-application-zatheros-btwlan-coex-agent-unquoted-service-path
• https://www.exploit-db.com/exploits/49053