CVE-2020-13541
https://notcve.org/view.php?id=CVE-2020-13541
05 Jan 2021 — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files within the installation folder that could lead to local privilege escalation. Se presenta una vulnerabilidad de elevación de privilegios local explotable en los permisos del sistema de archivos del directorio de inst... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1151 • CWE-276: Incorrect Default Permissions •
CVE-2020-13540
https://notcve.org/view.php?id=CVE-2020-13540
05 Jan 2021 — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Se presenta una vulnerabilidad de elevación de privilegios local explotable en los permisos del sistema de archivos del directorio de instalación de Win-911 Enterprise versión V4.20.13 por... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 • CWE-276: Incorrect Default Permissions •
CVE-2020-13539
https://notcve.org/view.php?id=CVE-2020-13539
05 Jan 2021 — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Se presenta una vulnerabilidad de elevación de privilegios local explotable en los permisos del sistema de archivos del directorio de instalación de Win-911 Enterprise versión V4.20.13 p... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 • CWE-276: Incorrect Default Permissions •