CVE-2020-10056

2020-09-0918:10:49

CWE-250

siemens

www.cve.org

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated attacker to execute arbitrary commands on the server with local SYSTEM privileges.

CNA Affected

[
  {
    "product": "License Management Utility (LMU)",
    "vendor": "Siemens AG",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.4"
      }
    ]
  }
]