CVE-2016-20058

Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation

Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.

Affected

Netgate · NETGATE AMITI Antivirus

CVSS v4.0 VULNCHECK

8.5 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 VULNCHECK

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.72% chance of exploitation in the next 30 days, 53rd percentile

Published

2026-04-04

Updated

2026-04-06

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/40540

Security advisories

• https://www.vulncheck.com/advisories/netgate-amiti-antivirus-build-unquoted-service-path-…
• http://www.netgate.sk
• http://www.netgate.sk/download/download.php?id=11

References

• CVE Record
• NVD entry