Skip to content
OpenAdvisories
Critical · 9.3 CVE-2020-13539 EUVD-2020-5786GHSA-55q2-p5ph-m3fp

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install dir…

Published Jan 5, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed.

Affected products

VendorProductAffectedFixed
— Win-911 Win-911 Enterprise V4.20.13 —

References