Selea Carplateserver Cps vulnerabilities

2 CVEs affecting Selea Carplateserver Cps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-36904, published 2025-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-36904, published 2025-12-31. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrary Windows binaries by manipulating the NO_LIST_EXE_PATH configuration…
CVE-2020-36903, published 2025-12-31. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that allows local users to potentially execute code with elevated privileges.…