CVE-2020-36929: brother brprint_auditor Unquoted Search Path or Element
Vulnerability summary
CVE-2020-36929 is a high (CVSS 8.5) Unquoted Search Path or Element vulnerability in brother brprint_auditor. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-01-2026PublishedVulnerability first disclosed.
- 16-01-2026Last modifiedVulnerability information updated.
Description
Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system.
CVSS metrics
4 scores · 2 sources · 2 versions- NVDNIST8.5HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundBrother BRPrint Auditor - 'Multiple' Unquoted Service Path
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Brother1 product
- brprint_auditor3.0.7
Support1 product
2 vendors · 2 products