CVE-2020-37252— Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation
Possible ATT&CK Techniques 3AI
T1068 · Exploitation for Privilege Escalation T1055 · Process Injection T1546.004 · Unix Shell Configuration ModificationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Realtek | Realtek Audio Service | 1.0.0.55 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-37252
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation
Source: CVE Program / CVE List V5
Vulnerability Description
Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未经引用的搜索路径或元素
Source: CVE Program / CVE List V5
Vulnerability Title
Realtek Audio Service 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Realtek Audio Service是中国Realtek公司的一款音频服务管理软件。 Realtek Audio Service 1.0.0.55版本存在权限许可和访问控制问题漏洞，该漏洞源于RtkAudioService64.exe中存在未引用的服务路径，可能导致本地攻击者通过注入恶意代码提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Realtek | Realtek Audio Service | 1.0.0.55 | - |
II. Public POCs for CVE-2020-37252
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-37252
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-37252 (1)
Exploits & Public PoCs for CVE-2020-37252 (1)
IV. Related Vulnerabilities
Same vendor: Realtek
- CVE-2016-20085
Realtek High Definition Audio Driver 6.0.1.6730 Privilege Es - CVE-2019-25345
RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote - CVE-2020-36974
Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted - CVE-2025-8300
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer O - CVE-2025-8299
Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PA
Same weakness: CWE-428
- CVE-2026-66839
Integrated NetKids iMark 权限许可和访问控制问题漏洞 - CVE-2026-18755
GV-ASManager DLL hijacking vulnerability - CVE-2026-9128
Studio 5000 Logix Designer® – Multiple Vulnerabilities - CVE-2026-8864
HP Fan Control App – Potential Escalation of Privilege - CVE-2025-71326
AVAST Antivirus 25.11 Unquoted Service Path Privilege Escala
V. Comments for CVE-2020-37252
No comments yet