Description (CNA)
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Win-911 | affected Win-911 Enterprise V4.20.13 |
CWE
CWE-276
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1150
ADP enrichment
No English description supplied.