CVE-2020-36929

Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path

State: Published
Severity: 8.5 High
Published: Jan 15, 2026
Updated: Jan 16, 2026
Reserved: Jan 10, 2026

Description

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	VulnCheck

Weaknesses

CWE-428 Unquoted Search Path or Element

Affected Products

Product	Versions
Brother BRPrint AuditorSupport	3.0.7Affected

References

ExploitDB-50005exploit
Brother BRPrint Auditor Download Page (NL)product
Brother BRPrint Auditor Download Page (FR)product
VulnCheck Advisory: Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Paththird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.