by Kastro
Paper/Archive/CVE-2020-5754

CVE-2020-5754

tenable — Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening…

EPSS 2%CVSS 9.1
critical.is priorityof 100
42
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 75.0.750 × 2015.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Webroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type confusion vulnerability over its listening TCP port, resulting in crashing or reading memory contents of the Webroot endpoint agent.

Affected

ProductAffectedFixed inSource
Webroot SecureAnywhereAll versions prior to version v9.0.28.48–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

reftenable.com/security/research/tra-2020-36