CVE-2018-20621

Published: Mar 13, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.

Affected (1)

Products: Microvirt: Memu

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microvirt Memu	Version 6.0.6

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.