Is CVE-2020-5569 actively exploited?

No active exploitation of CVE-2020-5569 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-5569 be exploited remotely?

No. CVE-2020-5569 requires local access to exploit.

What is the CVSS score of CVE-2020-5569?

CVE-2020-5569 has a CVSS score of 8.4 (HIGH).

HOME VULNERABILITIESCVE-2020-5569

HIGH

CVE-2020-5569

CWE-428Published: April 20, 2020· Updated: Jun 17, 2026

8.4

CVSS v3.1

Official Description

An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20TY, HD-MA20TY, HD-MB20TS, HD-MA20TS), CANVIO PREMIUM 1TB(HD-MB10TY, HD-MA10TY, HD-MB10TS, HD-MA10TS), CANVIO SLIM 1TB(HD-SB10TK, HD-SB10TS), and CANVIO SLIM 500GB(HD-SB50GK, HD-SA50GK, HD-SB50GS, HD-SA50GS), and which was downloaded before 2020 May 10. Since it registers Windows services with unquoted file paths, when a registered path contains spaces, and a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service.

NVD Source

Technical Analysis

CVE-2020-5569 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.4.