Security readout for executives and security teams
Plain-English summary
CVE-2020-37058 is a local privilege escalation issue in Andrea ST Filters Service 1.0.64.7 on Windows. An attacker who already has local low-privileged access could abuse an unquoted service path so code runs with LocalSystem privileges when the service starts. This is not described as remotely exploitable.
Executive priority
Treat as high priority for managed Windows endpoints running this specific service. It is most dangerous after an attacker or malicious insider gains local access, because it can turn limited access into full system control. Prioritize discovery and remediation, but do not frame it as confirmed active exploitation based on current sources.
Technical view
The vulnerability is CWE-428, unquoted search path or element, in the Windows service configuration for Andrea ST Filters Service 1.0.64.7. The supplied CVSS v4 score is 8.5, with local attack vector, low privileges required, no user interaction, and high confidentiality, integrity, and availability impact to the vulnerable system.
Likely exposure
Exposure is likely limited to Windows systems where Andrea ST Filters Service version 1.0.64.7 is installed. The source bundle does not identify other affected versions, bundled installers, or a vendor patch. Systems without this service are not indicated as affected by the provided sources.
Exploitation context
A public ExploitDB reference exists, but the CVE is not marked in KEV in the provided bundle. The available information supports local privilege escalation after initial access, not internet-facing remote compromise. Exploitation depends on service startup and vulnerable service configuration.
Researcher notes
Affected scope is stated only as Andrea ST Filters Service 1.0.64.7. The source bundle includes an ExploitDB entry and a VulnCheck advisory, but no named vendor patch or mitigation. Avoid assuming broader Andrea products are affected without additional evidence.
Mitigation direction
- Inventory endpoints for Andrea ST Filters Service 1.0.64.7.
- Check Andrea Electronics or trusted advisories for vendor remediation guidance.
- Remove or disable the affected service if it is not business-required.
- Correct vulnerable service configuration through approved endpoint management processes.
- Prioritize systems where local users or untrusted software execution are common.
Validation and detection
- Confirm whether Andrea ST Filters Service is installed.
- Verify the installed service version is 1.0.64.7.
- Review the Windows service path for unquoted path configuration.
- Confirm the service runs with elevated LocalSystem privileges.
- Look for unexpected files near service path components.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-428: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2020-37058 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.5 (4.0)
- Known Exploited
- No
- Published
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N——Primary CVE scoreVulnerability scoring details
Base CVSS 4.0 score
8.5HighVector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source materials
- CVE List V5 sourceCVE List V5
- ExploitDB-48396CVE reference · exploit
- Andrea Electronics Official HomepageCVE reference · product
- VulnCheck Advisory: Andrea ST Filters Service 1.0.64.7 - Unquoted service pathCVE reference · third-party-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Unquoted Search Path or Element
Unquoted Search Path or Element represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.