CVE-2020-25245CWE-276

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1)

published February 9, 2021

CVSS
—
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-02-09T15:38Z
EPSS history
Timeline
  • 09 FEB 15:38Z
    A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1)
    cvelistv5