CVE-2020-25106

Katalog CVE

CVSS 7.8 · High EPSS 1,5%

Kerentanan Improper Privilege Management pada supremocontrol supremo. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename.

Rincian

Terbit di NVD

22 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.supremocontrol.com/changelog/ release notes · advisory vendor
• http://packetstormsecurity.com/files/160666/SUPREMO-4.1.3.2348-Privilege-Escalation.html exploit · advisory pihak ketiga
• https://seclists.org/fulldisclosure/2020/Dec/42 exploit · mailing list · advisory pihak ketiga