high7.8
CVE-2020-13539
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 …
Impact
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Win911 | Win-911 | Version 4.20.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1150
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1150