PT-2021-9623 · Unknown · Mobile-911 Server

Published 2021-01-05 · Updated 2022-10-07 · CVE-2020-13541

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mobile-911 Server version V2.5

Description A local privilege elevation issue exists in the file system permissions of the Mobile-911 Server install directory. This allows an attacker to overwrite the service executable, execute arbitrary code with System privileges, or replace other files within the installation folder, leading to local privilege escalation.

Recommendations For Mobile-911 Server version V2.5, consider restricting access to the install directory to prevent unauthorized modifications until a patch is available. As a temporary workaround, monitor the installation folder for any suspicious file replacements or modifications.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-13541

Affected Products

Mobile-911 Server

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1151 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13541 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13541 · Vendor Advisory
• https://t.me/cibsecurity/21572 · Telegram Post