Lucene search

K
cve[email protected]CVE-2020-7352
HistoryAug 06, 2020 - 4:15 p.m.

CVE-2020-7352

2020-08-0616:15:13
CWE-798
CWE-264
web.nvd.nist.gov
160
3
gog galaxy
cve-2020-7352
vulnerability
elevated privileges
local attack
windows environment
metasploit
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the service for execution in this elevated context. The service listens for such commands on a locally-bound network port, localhost:9978. A Metasploit module has been published which exploits this vulnerability. This issue affects the 2.0.x branch of the software (2.0.12 and earlier) as well as the 1.2.x branch (1.2.64 and earlier). A fix was issued for the 2.0.x branch of the affected software.

Affected configurations

NVD
Node
goggalaxyRange1.2.01.2.64windows
OR
goggalaxyRange2.0.02.0.12windows

CNA Affected

[
  {
    "product": "GOG GalaxyClientService",
    "vendor": "GOG",
    "versions": [
      {
        "lessThanOrEqual": "2.0.12",
        "status": "affected",
        "version": "2.0.12",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.2.64",
        "status": "affected",
        "version": "1.2.64",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.0%

Related for CVE-2020-7352