How severe is CVE-2020-13542?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9.3 out of 10.

What type of vulnerability is CVE-2020-13542?

This is classified as CWE-276, which is a common weakness in software security.

CVE-2020-13542

CRITICAL Year: 2020

CVSS v3 Score

9.3

Critical

CVSS v2 Score

7.2

High

Weakness Type

CWE-276

View all →

Vulnerability Description

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.

CVE-2020-13532

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges t...

CWE-2762020

CVE-2020-13533

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attack...

CWE-2762020

CVE-2020-13534

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges wh...

CWE-2762020

CVE-2020-13535

CRITICAL

CVSS:9.3(Critical)

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYS...

CWE-2762020

CVE-2020-13536

CRITICAL

CVSS:9.3(Critical)

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code t...

CWE-2762020