CVE-2020-11640

Name of the Vulnerable Software and Affected Versions: AdvaBuild versions 3.0 through 3.7 SP2

Description: The issue is related to insufficient protection of the command queue in AdvaBuild, allowing a remote attacker to exploit it and run any executable on the AdvaBuild node. The executables that can be run are not limited to AdvaBuild specific executables. This is an Improper Privilege Management issue.

Recommendations: For AdvaBuild versions 3.0 through 3.7 SP2, consider restricting access to the command queue to prevent unauthorized execution of executables until a patch is available. As a temporary workaround, limit the privileges of the AdvaBuild node to minimize the risk of exploitation.