CVE-2016-20033

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files due to improper file permissions granting full access to the Everyone group. Attackers can replace the nssm_x64.exe binary in the manager and engine service directories with malicious executables to execute code with LocalSystem privileges when services restart.

Vulnerability Details

Published Date

March 16, 2026

Last Modified

March 19, 2026

CWE ID

CWE-639

Source

NVD

Vendor

Wowza Media Systems, LLC.

Product

Wowza Streaming Engine

External References

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5339.php
https://www.exploit-db.com/exploits/40132
https://www.vulncheck.com/advisories/wowza-streaming-engine-local-privilege-escalation-via-nssm-x64-exe

CVE-2016-20033

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment