by Kastro
Paper/Archive/CVE-2020-13541

CVE-2020-13541

talos — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install direct…

EPSS 0.6%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 50.4.504 × 2010.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation.

Affected

ProductAffectedFixed inSource
Win-911Win-911 Mobile Server V2.5–CNA

Scores by source

talos (CNA)9.3CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2020-1151