7.8
CVE-2020-25502
- EPSS 0.23%
- Veröffentlicht 20.01.2023 21:15:10
- Zuletzt bearbeitet 09.07.2026 00:17:02
- CVE-Watchlists
- Unerledigt
LoginCybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cybereason ≫ Endpoint Detection And Response Version < 19.1.282
Cybereason ≫ Endpoint Detection And Response Version >= 19.2.0 < 19.2.182
Cybereason ≫ Endpoint Detection And Response Version >= 20.1.0 < 20.1.343
Cybereason ≫ Endpoint Detection And Response Version20.2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.139 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| CISA-ADP | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
https://www.cybereason.com/cybereason-vulnerability-disclosure