CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2020-13540
https://notcve.org/view.php?id=CVE-2020-13540
05 Jan 2021 — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Se presenta una vulnerabilidad de elevación de privilegios local explotable en los permisos del sistema de archivos del directorio de instalación de Win-911 Enterprise versión V4.20.13 por... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 • CWE-276: Incorrect Default Permissions •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 2CVE-2020-13539
https://notcve.org/view.php?id=CVE-2020-13539
05 Jan 2021 — An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when executed. Se presenta una vulnerabilidad de elevación de privilegios local explotable en los permisos del sistema de archivos del directorio de instalación de Win-911 Enterprise versión V4.20.13 p... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1150 • CWE-276: Incorrect Default Permissions •