PT-2020-18662 · Plex · Plex Media Server

Published 2020-04-22 · Updated 2021-12-10 · CVE-2020-5740

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plex Media Server (affected versions not specified)

Description The issue is related to improper input validation, allowing a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges. This enables the attacker to potentially gain elevated access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2020-5740

Affected Products

Plex Media Server

References · 5

• 🔥 https://tenable.com/security/research/tra-2020-25 · Exploit
• https://osv.dev/vulnerability/CVE-2020-5740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5740 · Security Note
• https://t.me/cybersecuritytechnologies/2942 · Telegram Post
• https://t.me/cvenotify/3048 · Telegram Post