CVE-2020-23834

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing…

High · published September 4, 2020

CVSS v3.1
8.8
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.8th percentile
Published
2020-09-04T03:38Z
EPSS history
Timeline
  • 04 SEP 03:38Z
    Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing…
    cvelistv5