PT-2020-14321 · Veyon · Veyon Service

Víctor García · Published 2020-10-19 · Updated 2022-10-18 · CVE-2020-15261

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veyon Service versions prior to 4.4.2

Description The issue allows locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges due to an unquoted service path vulnerability. This is particularly dangerous in setups where users have administrative privileges, although Veyon users typically do not have such privileges.

Recommendations For versions prior to 4.4.2, update to version 4.4.2 to resolve the issue. As a temporary workaround, consider revoking administrative privileges from all potentially untrustworthy users to prevent exploitation.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-15261

GHSA-C8CC-X786-HQQP

Affected Products

Veyon Service

References · 10

• 🔥 https://exploit-db.com/exploits/48246 · Exploit
• 🔥 http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.html · Exploit
• 🔥 https://exploit-db.com/exploits/49925 · Exploit
• https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1 · Patch
• https://osv.dev/vulnerability/CVE-2020-15261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15261 · Security Note
• https://github.com/veyon/veyon/issues/657 · Note
• https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqp · Note
• https://t.me/cibsecurity/15400 · Telegram Post
• https://t.me/cvenotify/16541 · Telegram Post