CVE-2020-24848

Katalog CVE

CVSS 7.8 · High EPSS 0,39%

Kerentanan Improper Privilege Management pada fruitywifi project fruitywifi. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.

Rincian

Terbit di NVD

23 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management
CWE-287: Improper Authentication

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/xtr4nge/FruityWifi/issues/278 exploit · issue tracking · advisory pihak ketiga
• https://gist.github.com/harsh-bothra/5be73cfd53f1c5bea307c702ae83ff42 broken link