high7.8
CVE-2020-28046
An issue was discovered in ProlinOS through 2.4.161.8859R.
Impact
An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pax | Prolinos | through 2.4.161.8859r |