PT-2021-9622 · Unknown · Win-911 Enterprise

Published 2021-01-05 · Updated 2022-10-07 · CVE-2020-13540

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Win-911 Enterprise version 4.20.13

Description A local privilege elevation issue exists due to file system permissions in the install directory, specifically via the WIN-911 Account Change Utility. This allows an attacker to overwrite executables, potentially leading to privilege escalation when these executables are executed.

Recommendations For Win-911 Enterprise version 4.20.13, consider restricting access to the WIN-911 Account Change Utility to minimize the risk of exploitation. Additionally, ensure that file system permissions are properly set to prevent unauthorized modifications to executables. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-13540

Affected Products

Win-911 Enterprise

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 · Exploit
• https://osv.dev/vulnerability/CVE-2020-13540 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13540 · Security Note
• https://t.me/cvenotify/8366 · Telegram Post
• https://t.me/cibsecurity/21581 · Telegram Post