CVE-2020-13539

Win-911 Enterprise has a local privilege elevation vulnerability (CVE-2020-13539) affecting version 4.20.13. The issue stems from insecure file-system permissions in the install directory, exposed via the WIN-911 Mobile Runtime service. According to TALOS, by default the install directory allows ...

CVE-2020-13540

CVE-2020-13540 is a local privilege escalation in Win-911 Enterprise v4.20.13, caused by weak file-system permissions on the WIN-911 Account Change Utility. TALOS details show the installer directory (e.g., C:\Program Files (x86)\WIN-911 Software) grants broad rights to Everyone, enabling replace...