CVE-2020-13541CWE-276

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory

Critical · published January 5, 2021

CVSS v3.0
9.3
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00635 · 49.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-01-05T15:44Z
EPSS history
Timeline
  • 05 JAN 15:44Z
    An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory
    cvelistv5