How severe is CVE-2020-13541?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9.3 out of 10.

What type of vulnerability is CVE-2020-13541?

This is classified as CWE-276, which is a common weakness in software security.

CVE-2020-13541

CRITICAL Year: 2020

CVSS v3 Score

9.3

Critical

CVSS v2 Score

7.2

High

Weakness Type

CWE-276

View all →

Vulnerability Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation.

CVE-2020-13532

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges t...

CWE-2762020

CVE-2020-13533

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attack...

CWE-2762020

CVE-2020-13534

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges wh...

CWE-2762020

CVE-2020-13535

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYS...

CWE-2762020

CVE-2020-13536

CRITICAL

CVSS:9.3(Critical)

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code t...

CWE-2762020