CVE-2020-13912

EUVD-2020-6119
SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
solarwindsadvanced_monitoring_agent
𝑥
< 10.8.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://hansesecure.de/2020/06/vulnerability-in-monitoring-software/?lang=en
https://hansesecure.de/2020/06/vulnerability-in-monitoring-software/?lang=en