PT-2020-14666 · Activefax · Actfax

Published 2020-09-24 · Updated 2020-10-09 · CVE-2020-15843

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ActFax version 7.10 Build 0335

Description The issue arises from insecure folder permissions on certain directories, allowing "Full Control" to "Everyone". This can be exploited by an authenticated local attacker to replace the TSClientB.exe binary, which is executed on logon for every user, or to replace binaries in other directories, potentially requiring additional user interaction.

Recommendations For ActFax version 7.10 Build 0335, consider restricting the folder permissions on the %PROGRAMFILES%ActiveFaxClient, %PROGRAMFILES%ActiveFaxInstall, and %PROGRAMFILES%ActiveFaxTerminal directories to prevent unauthorized access and modification of the binaries, such as TSClientB.exe, until a patch is available.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-15843

Affected Products

Actfax

References · 3

• 🔥 https://blog.to.com/advisory-actfax-7-10-build-0335-privilege-escalation-cve-2020-15843 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15843 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15843 · Vendor Advisory