PT-2023-11745 · Even Balance · Even Balance Punkbuster

Published 2023-08-16 · Updated 2023-08-22 · CVE-2020-26037

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Even Balance Punkbuster versions 1.902 through 1.904

Description The issue allows remote attackers to execute arbitrary code due to a Directory Traversal vulnerability in the Server functionality.

Recommendations For Even Balance Punkbuster versions 1.902 through 1.904, update to version 1.905 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-26037

Affected Products

Even Balance Punkbuster

References · 10

• 🔥 https://medium.com/@prizmant/hacking-punkbuster-e22e6cf2f36e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-26037 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26037 · Vendor Advisory
• http://punkbuster.com · Note
• https://medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e · Note
• https://t.me/cibsecurity/68646 · Telegram Post
• https://twitter.com/CVEnew/status/1691794668281872388 · Twitter Post
• https://t.me/cvenotify/57076 · Telegram Post
• http://even.com · Note
• https://t.me/cvenotify/56613 · Telegram Post