Lucene search

[email protected]CVE-2020-25502

HistoryJan 20, 2023 - 9:15 p.m.

CVE-2020-25502

2023-01-2021:15:10

CWE-427

[email protected]

web.nvd.nist.gov

cve-2020-25502

cybereason

edr

dll hijacking

vulnerability

local attacker

code execution

elevated privileges

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges.

Affected configurations

NVD

Node

cybereasonendpoint_detection_and_responseRange<19.1.282

cybereasonendpoint_detection_and_responseRange19.2.0–19.2.182

cybereasonendpoint_detection_and_responseRange20.1.0–20.1.343

cybereasonendpoint_detection_and_responseMatch20.2.0

CPENameOperatorVersion
cybereason:endpoint_detection_and_responsecybereason endpoint detection and responselt19.1.282
cybereason:endpoint_detection_and_responsecybereason endpoint detection and responselt19.2.182
cybereason:endpoint_detection_and_responsecybereason endpoint detection and responselt20.1.343
cybereason:endpoint_detection_and_responsecybereason endpoint detection and responseeq20.2.0

CPE	Name	Operator	Version
cybereason:endpoint_detection_and_response	cybereason endpoint detection and response	lt	19.1.282
cybereason:endpoint_detection_and_response	cybereason endpoint detection and response	lt	19.2.182
cybereason:endpoint_detection_and_response	cybereason endpoint detection and response	lt	20.1.343
cybereason:endpoint_detection_and_response	cybereason endpoint detection and response	eq	20.2.0

References

cybereason.com

endpoint.com

www.cybereason.com/cybereason-vulnerability-disclosure

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-25502

prion1 cvelist1 nvd1