PT-2020-12185 · Starface · Starface Ucc Client

Published 2020-04-02 · Updated 2020-04-06 · CVE-2020-10515

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions STARFACE UCC Client versions prior to 6.7.1.204

Description The issue allows binary planting to execute code with System rights. This can potentially lead to unauthorized access and control of the system.

Recommendations For versions prior to 6.7.1.204, update to version 6.7.1.204 or later to resolve the issue. As a temporary workaround, consider restricting system access to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2020-10515

Affected Products

Starface Ucc Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-10515 · Security Note
• https://starface.com/en/business-telephony · Vendor Advisory
• https://support.starface.de/forum/showthread.php?7916-UCC-Client-f%FCr-Windows-Version-6-7-1-204-Released-26-03-2020&p=47548 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10515 · Vendor Advisory
• https://herolab.usd.de/security-advisories · Note
• https://t.me/cvenotify/2385 · Telegram Post