CVE-2020-13532CWE-276

A privilege escalation vulnerability exists in Dream Report 5 R20-2

Critical · published April 9, 2021

CVSS v3.0
9.3
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00403 · 33.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-04-09T17:50Z
EPSS history
Timeline
  • 09 APR 17:50Z
    A privilege escalation vulnerability exists in Dream Report 5 R20-2
    cvelistv5