CVE-2020-26133

Katalog CVE

CVSS 7.8 · High EPSS 0,33%

Kerentanan Incorrect Permission Assignment for Critical Resource pada dual dhcp dns server project dual dhcp dns server. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the DualServer.exe binary.

Rincian

Terbit di NVD

28 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/an0ry/advisories advisory pihak ketiga
• https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26133.md
• https://sourceforge.net/projects/dhcp-dns-server/ product