PT-2020-18888

CVE-2020-6013

·

Published

2020-07-02

·

Updated

2020-07-13

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ZoneAlarm Firewall and Antivirus products versions prior to 15.8.109.18436
Description The issue allows an attacker with existing system access to execute code at elevated privileges. This is achieved through a combination of file permission manipulation and exploitation of a Windows vulnerability on unpatched systems.
Recommendations For versions prior to 15.8.109.18436, update to version 15.8.109.18436 or later to resolve the issue. As a temporary workaround, consider restricting file system permissions to minimize the risk of exploitation. Additionally, ensure that the Windows system is fully patched to prevent exploitation of related Windows vulnerabilities.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-20-803
Found an issue in the description? Have something to add? Feel free to write us 👾