7.8
CVE-2020-25502
- EPSS 0.2%
- Veröffentlicht 20.01.2023 21:15:10
- Zuletzt bearbeitet 03.04.2025 18:15:41
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cybereason ≫ Endpoint Detection And Response Version < 19.1.282
Cybereason ≫ Endpoint Detection And Response Version >= 19.2.0 < 19.2.182
Cybereason ≫ Endpoint Detection And Response Version >= 20.1.0 < 20.1.343
Cybereason ≫ Endpoint Detection And Response Version20.2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.416 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.