Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-36879 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service name in the 'sc qc' command, allowing them to execute arbitrary system commands.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.diskboss.com/ [email protected]ProductVendor
https://www.diskboss.com/downloads.html [email protected]ProductVendor
https://www.exploit-db.com/exploits/49022 [email protected]Exploit
https://www.vulncheck.com/advisories/flexsense-diskboss-service-unquoted-service-path-vulnerability [email protected]AdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-428Unquoted Search Path or Element[email protected]

Affected Products

ProductVersions
Flexsense DiskBoss
11.7.28 (semver)

CPE

  • cpe:2.3:a:flexense:diskboss:*:*:*:*:*:*:*:*

Remediation

Flexsense DiskBoss Pro
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.
Flexsense DiskBoss Ultimate
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.
Flexsense DiskBoss Server
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.
Flexsense DiskBoss Enterprise
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-36879
NVD Published Date:
Dec 5, 2025
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-36879 Details - Not Deferred