PT-2021-9623 · Unknown · Mobile-911 Server

CVE-2020-13541

·

Published

2021-01-05

·

Updated

2022-10-07

CVSS v3.1

9.3

Critical

VectorAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mobile-911 Server version V2.5
Description A local privilege elevation issue exists in the file system permissions of the Mobile-911 Server install directory. This allows an attacker to overwrite the service executable, execute arbitrary code with System privileges, or replace other files within the installation folder, leading to local privilege escalation.
Recommendations For Mobile-911 Server version V2.5, consider restricting access to the install directory to prevent unauthorized modifications until a patch is available. As a temporary workaround, monitor the installation folder for any suspicious file replacements or modifications.

Exploit

Fix

Incorrect Default Permissions

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2020-13541

Affected Products

Mobile-911 Server