Lucene search

TalosCVE-2020-13540

HistoryJan 05, 2021 - 4:15 p.m.

CVE-2020-13540

2021-01-0516:15:14

CWE-276

talos

web.nvd.nist.gov

cve-2020-13540

local privilege escalation

win-911 enterprise

vulnerability

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.2%

JSON

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed.

Affected configurations

Nvd

Vulners

Node

win911win-911Match4.20.13enterprise

VendorProductVersionCPE
win911win-9114.20.13cpe:2.3:a:win911:win-911:4.20.13:*:*:*:enterprise:*:*:*

Vendor	Product	Version	CPE
win911	win-911	4.20.13	cpe:2.3:a:win911:win-911:4.20.13::::enterprise:::

CNA Affected

[
  {
    "product": "Win-911",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Win-911 Enterprise V4.20.13"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2020-1150

Social References

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.2%

JSON

Related for CVE-2020-13540