CVE-2016-20094
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.8 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the service installation. Attackers can insert malicious executables in the system root path that execute with elevated privileges during application startup or system reboot.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-428
Source
NVD
Vendor
Anydesk
Product
AnyDesk
Discussion (0)
Add Comment
No comments yet. Be the first!