PT-2023-11737 · Cybereason · Cybereason Edr

Published 2023-01-20 · Updated 2023-01-30 · CVE-2020-25502

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cybereason EDR versions 19.1.282 and above Cybereason EDR versions 19.2.182 and above Cybereason EDR versions 20.1.343 and above Cybereason EDR versions 20.2.X and above

Description The issue is related to a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.

Recommendations For Cybereason EDR version 19.1.282 and above, update to a version that includes a fix for the DLL hijacking vulnerability. For Cybereason EDR version 19.2.182 and above, update to a version that includes a fix for the DLL hijacking vulnerability. For Cybereason EDR version 20.1.343 and above, update to a version that includes a fix for the DLL hijacking vulnerability. For Cybereason EDR version 20.2.X and above, update to a version that includes a fix for the DLL hijacking vulnerability. As a temporary workaround, consider restricting access to the vulnerable DLLs until a patch is available.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2020-25502

Affected Products

Cybereason Edr

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2020-25502 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25502 · Vendor Advisory
• https://cybereason.com/cybereason-vulnerability-disclosure · Vendor Advisory
• http://cybereason.com · Vendor Advisory
• https://t.me/cibsecurity/56800 · Telegram Post
• https://t.me/cvenotify/42589 · Telegram Post
• http://endpoint.com · Note