Paper/Archive/CVE-2020-8868

CVE-2020-8868

Quest Foglight Evolve — This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0.

EPSS 9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 95.4.954 × 2019.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the __service__ user account. The product contains a hard-coded password for this account. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-9553.

Affected

ProductAffectedFixed inSource

Foglight Evolve9.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

zdi (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refzerodayinitiative.com/advisories/ZDI-20-290 refsupport.quest.com/foglight/kb/315091/fms-5-9-5-hotfix-hfix-314