PT-2020-16744 · 1E · 1E Client

Published 2020-12-29 · Updated 2021-01-04 · CVE-2020-27645

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1E Client version 5.0.0.745

Description The Inventory module of the 1E Client does not properly handle an unquoted path when executing Tachyon.Performance.Metrics.exe. This issue may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in the %WINDIR%Temp directory.

Recommendations For 1E Client version 5.0.0.745, consider restricting access to the Inventory module until a patch is available. As a temporary workaround, avoid executing Tachyon.Performance.Metrics.exe from unquoted paths to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-27645

Affected Products

1E Client

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2020-27645 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27645 · Vendor Advisory
• https://help.1e.com/display/GI/1E+Security+Advisory-1E+Client+for+Windows%3A+CVE-2020-16268%2C+CVE-2020-27643%2C+CVE-2020-27644%2C+CVE-2020-27645 · Vendor Advisory
• https://t.me/cvenotify/8123 · Telegram Post
• https://t.me/cvenotify/7931 · Telegram Post
• https://t.me/cvenotify/8124 · Telegram Post
• https://t.me/cvenotify/7929 · Telegram Post
• https://t.me/cvenotify/7928 · Telegram Post
• https://t.me/cvenotify/7930 · Telegram Post
• https://t.me/cvenotify/8125 · Telegram Post
• https://t.me/cvenotify/8122 · Telegram Post