← Volver a CVEs

CVE-2016-20060

HIGH

7.8

Descripcion

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioNONE

Publicado4/4/2026

Ultima modificacion4/4/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-428

Referencias

https://www.exploit-db.com/exploits/40528(disclosure@vulncheck.com)

https://www.hotspotshield.com(disclosure@vulncheck.com)

https://www.hotspotshield.com/download/(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/hotspot-shield-unquoted-service-path-privilege-escalation(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.