CVE-2020-7352

Katalog CVE

CVSS 8.8 · High EPSS 3,8%

Kerentanan Permissions, Privileges, and Access Controls pada gog galaxy. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the service for execution in this elevated context. The service listens for such commands on a locally-bound network port, localhost:9978. A Metasploit module has been published which exploits this vulnerability. This issue affects the 2.0.x branch of the software (2.0.12 and earlier) as well as the 1.2.x branch (1.2.64 and earlier). A fix was issued for the 2.0.x branch of the affected software.

Rincian

Terbit di NVD

6 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-264: Permissions, Privileges, and Access Controls
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

3,8% peluang dieksploitasi; lebih tinggi dari 89,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rapid7/metasploit-framework/pull/13444 patch · advisory pihak ketiga
• https://www.positronsecurity.com/blog/2020-04-28-gog-galaxy-client-local-privilege-escalation/ exploit · advisory pihak ketiga