PT-2020-16743 · 1E · 1E Client

Published 2020-12-29 · Updated 2021-01-04 · CVE-2020-27644

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1E Client version 5.0.0.745

Description The Inventory module of the 1E Client does not handle an unquoted path when executing %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%Temp.

Recommendations For 1E Client version 5.0.0.745, consider restricting access to the Inventory module until a patch is available. As a temporary workaround, avoid executing %PROGRAMFILES%1EClientTachyon.Performance.Metrics.exe with an unquoted path to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-27644

Affected Products

1E Client

References · 11

• https://osv.dev/vulnerability/CVE-2020-27644 · Vendor Advisory
• https://help.1e.com/display/GI/1E+Security+Advisory-1E+Client+for+Windows%3A+CVE-2020-16268%2C+CVE-2020-27643%2C+CVE-2020-27644%2C+CVE-2020-27645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27644 · Security Note
• https://t.me/cvenotify/8123 · Telegram Post
• https://t.me/cvenotify/7931 · Telegram Post
• https://t.me/cvenotify/8124 · Telegram Post
• https://t.me/cvenotify/7929 · Telegram Post
• https://t.me/cvenotify/7928 · Telegram Post
• https://t.me/cvenotify/7930 · Telegram Post
• https://t.me/cvenotify/8125 · Telegram Post
• https://t.me/cvenotify/8122 · Telegram Post