CVE-2020-28392CWE-276

A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1)

published February 9, 2021

CVSS
—
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default target folder, incorrect permissions are configured for the application folder and subfolders which could allow an attacker to gain persistence or potentially escalate privileges should a user with elevated credentials log onto the machine.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.8th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-02-09T15:38Z
EPSS history
Timeline
  • 09 FEB 15:38Z
    A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1)
    cvelistv5