CVE-2020-37160
SprintWork 2.3.1 - Local Privilege Escalation
- State
- Published
- Severity
- 8.5 High
- Published
- Feb 6, 2026
- Updated
- Feb 17, 2026
- Reserved
- Feb 3, 2026
Description
SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-276 Incorrect Default Permissions
Affected Products
| Product | Versions |
|---|---|
SprintWorkVeridium |
|
References
- ExploitDB-48070exploit
- Vendor Homepageproduct
- Product Information Pageproduct
- VulnCheck Advisory: SprintWork 2.3.1 - Local Privilege Escalationthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.